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(S4) A method and system for managlrsg a dsta obl&ct so as to comply with pfgdstsTOmsel 
condsUons for ussg© 



(S?J Tha prBseni isiv^ritinr! reSgses so a irTiajirod anci 
a systen^: tor :riaiiagiBg « data o&jsct so as to cof 'psy witJ- 
pfssaiBfmifiaci condiJjofia for usage at the <M3 abjea 
T;> c;o-;tri3i ihs yaaga of the dsisa obi®;;!, s sot at caiitfoi 
data, <:isfirt:rsg usages ot ii~!« ciata otejed whioh corns ly 
wi!hf;;«;pr8iMarrt}in«dcDnd:ii;3ns. !scfaa^adta:r■hed3ts 



BCijest, The fMa afoigc; is cofsaatenstsa with the user sa; 
of controi data, sncryptad 8nd transiSetrsd ta n-B user. 
When tha uae' wants to use tne cista abssct, a speciai 
ti.aer progmn! c.i;ifK;ks whether the nmga -sofapiies with 
i;;ie control ciasa. If so, m& ussgo is enaisssd. Oti-isr.yise 
it is dis&biaci. 




f-!WfS-S ;:v isss'i:. ^SS»; S'Ai'Sc 



|0801| Tt!s present inverssbn ?«saiss io dasa procsss- 
irig and -Tiors particuisriy io a frjgthod snci s sysiSiTs tor 
sfBnsgsng data oi'iscts so &s Jo cofSipStf wsth prsds's-r- 

pufjSf: o' upivsfsai f:or;r!.xt;v':i:>', A iypics! vision li'' ths 
data highway has Song dsstafBjfi higS'i speed data ojTijjrs; 

cesnirfiiiiiicaiiorss senficas and a Wide j'jinga fsf intsrescSivs 
Oivsiiie sssvicss so .consumei-s, MSiiy of.tf^s p!sc«s am 
already m piaca, t5thBira ar& ia dfivaiopfFiea! or Sssting. Sri 
evsfi rhougn sne dats rtighwsst^ ts under consts-ystior- 
il is ciitTsntiy open to fimitod tf attic. On-iing sstvicss ars 
spfingiag up sisiiy arsd vsdea an d«fnaf!;3 services are 
currsptfy bsir?^ t$stsd, 

paS3| TtiS poiaiitiasta bersafstsotiiasy la (romanss, Tha 
sGops pf iritei-matiop svaissbio to cposymers wii? feeoo:ms 
trijjy gjops! as tha tmdsiona; barriars so aniry tor riistri- 
buSofi s!, snd accsss to, ffs'orrnatiG;? sra sewsrsd drs- 
f?>aSicaiiy "i'nis •■Tiaans sha; r'lore Sivsrsa aridspsciafizeci 
latofmsispri wiil de rsiada avaiSadle as cenvet'SsnSiy 
as ssnsrto soufcss irof?; nsajor vendofs used to dp. Thfj 
sad rasijiS is Jhss oraanixatisns arid iddividuais wil! be 
smpowsrsd m ways persto'ofe only smagidad.. 
|i3G!54| Ht3wav8r, a tuijy fiJiaaUoning daS;a ht:gf3iv;3y wisi 
pftfy Pa as V8!d«bie as ths actual sdftsi'Ses wlVsoi-s i; pro- 
viPas: Safwces envisionad tor the dam nighway that io- 
vosve ihs dsiivery of data objects (s.g, Dooks. fiims, vidas, 
r?0«.'s, fiitisia, jseft&'arfj, gan"sas, etc.) wiii da and are car- 
rer-'iy SsTsaed by iiia a«alabtsty at a-jcd ebjf«!e. Librsry 
,sud sdgdstioRa! s>s-vicss aro simifaiiy atfsotsd. Sofors 
owaers wiii aiiow tisssr data objads io ba afJored thay 
mLsst ise sssursa of royajry pssyn'^dms .and pros-eotiop f t-osri 
pirajjy. 

|0Cf05| Enoryption is s ksy cO'rippuant o? sny soSutior- 
to prpvids espy protsctiop. But eocnifptson aiprjs -a pct 
saougii. Durii^g trsnsrnLssiprs arsd stcraga the data od- 
isc;s wiii bo prptacKd oy enprypdpfs, pu! as sopfi as sn- 
ypua givef: the kay io dacspharJi-sa content da wiii t'ava 
uufimiisd cpotfo; oi?or it. .Siocs siie digits! dop-jain psjsttsKs 
P8ia otjjectatc Pe raprcducsci in uaiiinttad quan^stsas wiip 
i-ic ioas of pualiiv, a.spii Pijjact lAJiii rseed to ce proiec^ed 
from aniimiiBP usa and naai^thonrad raprodijction ano 
?^aaie 

{OO&S] Thg pfotpcticn problam nast na;: ba soivad by 
a sepsraie soiuticn fcr each padicpiar dara fpirfi^at, ba- 
causa Shan tne prpgrsss wils indgep bs siosv. It is ia^por- 
isnt So corjaidsf ids effect islBfsdardizaSicn ors an indsis- 
Try, Copsidsr how tiis VHS, the CD sod tho D AT fsrmsts, 
aad >ha IBM PC CQn5pa!id!iifY SiaadaaSs have encour- 
agdd growth: in trso!;- fcsp-activo inatisfe-iss, Hpwover. if 



?: 

tners is to tje any typo ot afeddsrolaation, ths smrfdard 
must provids upiyarssi sdaptabtlity to the nseds or both 
data providars and data usars, 

Ttje data oi:<.isci: owner criay waPt to fiave psjr- 

'> n-fanant aaeute asptroi over haw, wtsart. whara, and by 
wiio-Ti his pfopan:y is ussd. FudtseriTsoi^, i-;:S P~!ay want: 
ic daiiije di!fe;'8nt rijies of angager-ief ii for aiiferani types 
of i.ises'S" apd different types of secunty depsndsng on -he 
vatas al padiaiiar abiects. Tha rutas defiasd by bini sbsii 

?» govers^ th«s autod'atsd opsrariooa enabted by data aerv- 
ices and aatvifOfKing. Tnp owrisr nisy aisn want to seti 
cpnipossta obieas wish dsfferant ruies goveriispg aaoh 
consftaant oblsct, Tiias. it is necassary to be aijis to 
impienrjant vadabie and axtansifoia ooatrof. 
E0GO8t The ij«or on his part wartfs to Pg aPis to aaaroh 
for a:fd ptjrctiasa datss objecta in a canvaaisrit manaar 
if desired, tna us«r shooid ijo apfa to corribtna or aas: 
purchases ob|a<;!B (i.e. farcraatiag a preatsnta'iont. For- 
them'soi-a, tt-a osar roay want to prosaot nia phiidrah fror;i 

^' inappnspnsts STiafscisi. A compists soiatiop muss anasie 
tbeaa naada as waii. 

[SO<tg| What is oesdsri i.s a oiiivsrsaiiy adapiabis .ays- 
istn af!d ffsettiod far rriafiagsfig the exciiarige and Lsaga 
of data otJjects wiVsia pi^-tactiri'p ths' inssi-osts a? data aP- 
iS' iact pwnpfs apd ussrs. 

[ffeicsl ,<X •■nstbod for aafpsx-iog paymarit of royaitiss 
wf^ea copying sofisopy boosts ss deacnbad sa the s^ufp- 
paai^ pa-aiit appiication £P SS67 80S, Tbis nisthod pro- 
tecas a fofmattad tax?; atrearrs of a stasctijrad docutnofS 
wtsiOft inoiudas a foysfey payment mm(A having a apa- 
dai tag. Who?? tne forn-iattea tax?: straan'i is inputtsci in 
the user's data proceeson tne tsKi straarn: is searohad to 
idantityttis royaity payaxsas eieaieo! sod afiag i.s .stared 
in tiie rnersjory ot tije d.ata proijesaar, Wisart -he -jsar for 
iristarfCf raauasts to psiat the aocumant, the aafa pros- 
assor reqoeata autfiori^aiioa for ttiis; oparatfan frsars a 

*? seaopd data p,focisssof, Ti^a saaond data procossof 
charges she aser ine amount tnaicatetS in !ha royaiiy pay- 
niant siamant ana than tr8rssr!>i!s tha authorisation to stia 
first data procassor, 

Ona safioua iifnttaticri of thia mashod is ti-sai it 
oaa oniy be appiiso to structufsd ciPcu:Ter4a Tha de- 
scfiptiof! of tha abave-rpea-iorfad Eurocaan patertt appii- 
caliors dsfines a isfruoiurad aooumans as; a docon-ient 
praparad in aocan:fanca witti ai^ SGfifiL-ccrapiiafi: type 
d«ftnM«fi. tn athar words « part not be appiied to docb- 

.4C n'lanta wjhich aro not SSiViL compiiaat and it canna? ba 
appiied to any osi-iar types tsf data abiecis, 
[■{fQ12] Fuilt'ianTiora, this rs'iatiiod daas act provide for 
variabSe and axtensibie cpntroi, .A,rtyppa pan porchaaa a 
softcopy boais pa a CD, a floppy disc or tne iii<g, aad tha 
same fcyaisy asfioufi! is iodicsstaii in tfse ri)yafiy paytnea! 
aiap-isnt of a;; sottaopy boaits ot sna sap":e titla. 
|8ei3| Thas, the rriathod ciascribed ih £P 0 587 800 
daas rsoT sa■is^y the abcva-nianttaoad •■spun-aiVisnts. for 
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LjntifS!'sa% sdastafese psvsisctfcn of aais o{5js<?ts, 

|0014| Ai^DoriSingsy. st iS a Ssrsi oiiiisct of ff5S ;;^vsn!iOf- 
to pfovids a msihisd and a dsta procsssing system tor 
sfBnsgsng adata sbjecs srs a mafiijfsr iSia; is indepsndsst 
ti'se totmat and the slruoturs tStsrsol so as to compiy 
ssiith prscismfmirsedcofidKions tof iisags cofiiro- 3;!Ci rny- 
3)^/ payrf ■sfst. 

{OStS] it i3 a SustS^sf obiBCt or ins invsr^tion pr?>vsds 
siiCh a meihod and sysissrf «fh(cn is ifnivsrssiSy adaptabSs 
•0 tns needs of sot?! the ownsf aod the oser of tn» oata 

|0016| A tU!tr!S!- ocjsct tris invensort is to provida 
sues? a meJhod snn system wfiich ersabiKs a d;5ta nbgsnt 
provider to dissibute his oam o»is« wftife mafntsinfoa 
confroJ c! the usage Jheraol 

imt 7} Yst mmm c»j«« or m iammm ma pfovida 
an-:e'hodand sy.st&!T: vjhich atipw.'S a dasa obiee; p:tiv;dsr 
ta seisct the isvs; ;:t ssciirit^? kirpis dsts aPjeci in a ttexii>§s 
way, 

|Oei83 Yst at sotber oSsjfict of She invdoiiors is to provide 
socd a mstiiod and system w;hich otakss ii psssidia to 
sstabiish afi aodti tfssS for the ciaiB object. 
POI S| Y«s snoihar oOjsot ss to pfovids sucfs a mstdod 
S!id s>'s!eni whicn rnsses it pessibk: io se;i sno bsjy oata 
objgO'S in 3 sjscuro way, 

COfsaO] Tf^g above -meotio r!«;d objects asf: achievijd by 
a msihod and a system havssig iha feaiorss of cisims r, 
16.21,24 mi 27: 

[0021 1 Padicuiar ef?i»od)iTieats of the inveocons are 
i^ciisd in me sut5S!Si!TiS. 

{aaSS] i^ere part!0:j,;af!y, 3 data object pravicier, e.g. 
tils owiier of a Pafs objisct or his sgant: ibroteft, storss 
•he I'iatfj obiisct !r! a menicfy asvsce, e. g. a buiic storage 
device, wiiere is aaBssibie by fnaaf^s of !he Paia pf»- 
vicieT's data processor, Tlie data objsct can coriaiss of 
digiia; data,. anak;g da!a ar a cornbifsaisof; or ijybrid of 
ansiog ai« digitai data, 

|0023| A general se!: i)t cojiffiJi dafa, vi;hic:h is dsised on 
tiie ofsdatermirfsci oeridiEio^s tor aaaga of the data ob- 
ject, is. created and sisfsd ie tbe sasrsa nrjemoiy device 
as !ho data odjsct or another marnofy do viae whsre i; ;s 
accessible by tha data provider's oaia pfocsssor. Tf>s 
prodahjsrnsaod coi-sdSions for osago fnay bo dsf!?^ed by 
tha daia obis« owoer. cy t?!e broKaror by anyooa eisa. 
Thay may differ i.^st^voasi diffarsnf Pasa, otsiscts, 
P024| "Tha gsdOi^ai sei of caotroi oasa comprises at 
isasi one or more tssaga oonfmi aiemoore, whferi define 
sjsagss of tho data objoct wiiicd cpmpiy with tno prsde- 
tenriiried coodisioos. Ttjese ijsagas n-?ay eacompas.ator 
insfanes ttts ksnd ot osgr, a tinis iirrH? for usage, a geo- 
gs-aphicai area for usage, aiiowed eperahoas, siJch as 
faakingaharacopy*>ttii8d!atao!jjec!orv!ming il. and/or 
ciairo fo royaity asymaoi. T'rsa gensrai sat ot oooii-oS data 
may cDmpdsse o;hsr kinds j)t aoosroi oiefaenrs tsaaides 
toa t^ssge cootroi siameot. in a pi-afarrod om&odimsnt, 



tna genera! sat a? oontroi cists compfisas a sacurily con- 
troi essmem wtjich defines a seeurit^f prrxsadyfe <,vn:!ch 
has so i:f3 canlsd oat datoi^; asaga of the dsra objech it 
aiso con-ip.asss sn idsrijjfiei-, oaiquaiy ider^tifies iiie 
'> aenafai so> of corffriof diJta. 

Tha gena-^ai sat of contrci dasa, i.s corjcatanatad 
wiih aoopy of -ha daSsoisiact, Thus, iha cofstroi data doas 
not rssida in tha data objacf, bot ootssda It which makes 
die ttsntroi daia inoependent of the forn-iaf of .and tne kind 
?f of data oijiftot and v-'hich aiiows for o&ags aofiftoi inda- 
peoderiSiy of -ne data object format, 
[(s«:2e| Ai iaast iha ijsags coniroi aternsrafs) and iha 
date ocject are encs-ypted, so that tde user ic unabie to 
use tha dais oijjacE wiifsoijt a tjser progfaif s which gar- 
's fomia the oss^a ooritrof and which decrypts the data ois- 
jed: Aitemafivoiy. !;he whoie set of control data aad She 
ocpy at tfte data abieci may ba encrypted, 
(8(527| A usar rnay request assthodxation f;;r sisaga of 
a data objaot rasiding as a data providef's prooeasor via 
--i*' a data oahA'Of!-; or in aay ottier appropriate way. Tt-<a at;- 
tiiOfisaisoii may or tnay tioi fsoijirs payrs^afss. What! a re- 
coa.'^t for antt-icrisaiiof; tor usage is !?:ceiv'ad, a snsr sat 
of oofiStoi data is craatad isy the data provitiar's pajoas- 
sor. The user set of contcoi data ccsTipi'ises tiia gansrai 
iiS' set of confroi data or a subset tneraof incsoding at toast 
one of said usage consroi siaivtants which is reiavas'it for 
she .acttjai oseo n t\,'pic.aiiy also iociodes a rie* iderss'fief 
which ufiirjusiy idas5tifies this set sjf conti^O! data, tf taie- 
vant. the user set of contros data aiso comprises an iodi- 
cation of !ha number of tssagas aaShohjad. if tnora thar) 
one fcft^d of us&ga is auf hodsad, she riunipar of aaoh Kind 
cf iissaao rr-say tje specified. Pioatiy, the iBsr ses: of contrci 
data is ooncateaated with a copy of tha date objeci, artd 
at ieast the [sasige coah-oi eiefneots and tne cj5py of the 
;5S data objaot ase ancryptad to oi'aate a seoara dafa pao!<- 
sige ready fof transfer to the user. 
pS28] 8eft!ra ttse data package is transfarrsd to the 
user, ft shoutd ssa confirmed tiiat tha reqij-ast for author- 
i^affofi for sjsaga haa been gtaritad. The check is prafar-- 
■*c aijiy carried cot batpre ts^s yser act of oofstro: data is 
create;! !-is)waver, is: can afso ba oamad otjf in garaiie! 
witrs oi- attar she cs^atioo at she tjaer oentrol dasa, in tiia 
isttef case, the numberof usages reqiiosfsd tjvthe user 
is teniaSiyafy asjthorsKsd and inciiided in Sfss asat set. but 
if tha rsqussi is refijsed sns tisef set is oancsiSad or 
changed. 

The data package snay de tfansfei'red to ttte 
tssar by alaoiforsfc roaans or stoi^>d on buik sSomge media 
and traoafarred to she dear fjy srsaii or py any soiSabie 
AS rrfjaspcftatioo rrie.aos. 

l^m} Oisce tha daia objaot has imo packaged in tha 
above-described manaer, it can ooiy he accessed by a 
liserpnsgrain which hasfjuiit-i-i asaga oorttnaf and means 
fof dai'vptiag tire data p.ackage. The user progran-s wifi 
oniy peoTiif sjsagas daffrtad as ar;c;ept3bi;e isi tiia contrci 
data, ii^oreovar, if tha coiitroi data oompdsaa a saoprity 
contfoi eieftieni, tha secijrity riroceds-repfascribed there- 
in has to ba compiiad with, iii ana eiTsbadiOfaaS, ihe usage 
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com;^! my psitomisa ss lOiSou'S, S t?i>s user sls^Jiciss 
i:o ase a assa objsct. ;n« user prjsgrsni ch&css ;hs ocsjitfoi 
data io s«g it t^iiS fjctsan is atilhafissd. Mors panicsjiafiy, 
it checks rhar t^ie numbsr of aathorissd ussgss ;;his 
kirsc! is ors8 ormisrsj. if so, 5hs action is sr^&iitled and -i-ss 
r>i}mbsr of s:j{riefi£sci assgss dscrsmfintsd tiy one, 0th- 
amiss, aciion is Sfi!sra:p!sd by ihs tiser prcsgrafr: and 
tfis user msy or may not bs givsii she opportunily to pur- 
cnasfj !:i~i8 rsgsir So cctfnpif:;® t^se f-cfson. 
|0031J Afef ths t,is;89e, She ijs&r pfograrfS rspaoJ<8g€S 
ths csaia oi:Kget in sne same manngr as if was pacivagad 
befofS, 

|O0S2| VV!i«n 3 <ia;(5 obisoi is :-«;!3i,stfib!jSad by a o.ser 
a bfoksr, new c:oni;fni sSamsij^is s-re sddsd if; i:i-ie con-roi 
fiiasa to rsfiscs tns r&istion ijeiweefs ffse oSd ussf^foker 
andSba new ysarfbrok-af. in this way. an sudi- ■rais fortfis 
data obiec! may creatsa, 

pJ033| AsKording So another aspect of thra invsntior^ as 
ieass fwo dasa packages ssored or: a ussr's data proc- 
sssor, which sxamirsas »hg nsaga eonSrei isigriisais otths 
data pacfoagss in ortSar so find a fnatcSi it a srsa-eii is 
foijnd, sha assr's ctsssa smcsssor carrias oht bp. aasias^ 
wi^icsi is spadifiad in tf-sa ussr saJ af aontfoi daSa. Ti-sis 
STisshod oan ise ami tot S8ir>g and b«y«^ m& oc^scts, 

rig, I is a tiow diagrans siiowiijg tha gsnarai daia 
fiow accos^aihg fo the inve-^tios'?. 
Fig. 2 is a system foiacii disgram a? a data atjjecS 
p!-ovid:6r's data processor, 

Fig. 3 IS 3 bloc!? diagrafT? showing Sf5e diffarijsti o^od- 
uses of a dasa packaging prograni acce-xiftsg f>3 tS>s 
isvaasioa. 

Pig. 4 is s; dasa f!i;w diagram of a data packaging 

pfOSSSS, 

Fig. S is an aKarnpSa of a, iieader Siia. 

Fi^. g is an axsiTtple of a issage dasa tits. 

Fig. 7 is a dasa flow diags-ani of ioafSing aa OKsec; to 

tiis data c&iact providefs t1asa p'-ocessor. 

Figs 8a i5T!d 8b ars axampias of (»!>t«>i data lor ss 

dasa obj«c; ofs tbs daia oaico! providas's dasa proc- 

ajKsor aad tor an ob|>3«t rsaoV to ba s?anst8n~ssd to a 

osof, r>aspaotiv«iy. 

Rg. i3 is s? dssa flow diagrafri at data pacss^gisp on 

the oata oijtaci pfovioafs data proooaaon 

Fig, 10 is a f sow diagram of a daia paci<agmg prooe- 

dara, 

Rg, 1 '■ IS a sTsansery iniags of a dasa objacs and tss 
ooaffoi data 

Fig, 1 2s Is a rsiamory s'naga os sha cotsoaSeaaiedcon- 
troi data aad sasa {jn«set. 

Fig. 1 Sb is a aiswiosy irnaga ot tha oonoasaaatBd and 

socfYpied controi data and daia oisjaot. 

Fig. tS is a systoai biock diagram ot a asss-'a dasa 

proc-easoi'. 



s^ 

Fig, 1 4 is a tjSo«k diagi^nvshowsng ti-ie diftsrsm mod- 
tiisjs ot a user prsigmrn sscGOfftirig to ifta invsrsfiori. 
i-'-sg, ■ 5 is a fkiw dsagrats'; .of using a data os,\iacS on 
the ussrs data processor, 
'> Fig. 1 6 ia a fiovsf diag;5&m a; how tha osof pFograf-t 
opsi-ates in a spacific application axampse. 
Fig. 1 7 is an sxaropio af varisios da; a paok&ga stajo- 
ii,j!-es for c-o(S!iposiia ebjecss, 

[£t035| Fig, 1 Is a ftow diagram showing she genoi^i 
£j;3ta fiffw aacordlngto st-sa invantior!. The fiow diagrjjni is 
divided into a data objactpreviderpail ; and a user part 2. 
P(f3g| ia ihe daSa ofojeos: provider pad 1, a data objaa 
34 is created by as^ auti^or. TSie data ob]ac5 can consist 
^' of digital dasa, ana-ocs data or a corrislnation or hyteid !>t 
anaisjg aod digis&l csata. Tisa primary differencatsstvyaan 
anaiog data odlsots and digitai data ossj-scts ia the msans 
tor sSrsrage, tssfisfar arret uaaga. 
[»03?] Tha author afso determines the conditions 42 
is> for sii:S i-issge of fha data obi act a^s by s wser. The data 
object 24 and tise ijsaga conditions 4£ are itspiJE so a data 
paciiagiag pmgram sg, which crsates a securs data 
package 40 of the dais ob|8ct aod of cotstrol dass which 
ara based on she sapat lisaga Gondisions 4a. Orica pacti- 
sgad iu 5hiS vsisjy, sho dasa oS5lect cesn oniy ba ijoceassd 
py a user program. 36. 

[eG38] Tha dasa obiact nnay ba paci^agad togathsr with 
a ges^arsf set of •censro: dsssa, whieh is tne mm for sii 
iisars of tha saia os>iec:t. Ttji.!; may ba She rsjse wimn Sha 
;ss5 data ebjecs Is sad! se a rstasier or a bPiieiiS) boan:!. whars- 
from a assr may obsaia is: The dasa tibSaat may aiso be 
packaged asa coassaaaarica ota rsqsiastf fo;'f! a csarfor 
usage of she data object, :n that case, the packs^ge may 
ifioiode consrol daia wi-sici! is speoificaiiy ada!?!ad so tisaJ 
ussr. This coesroi data is eaiied a user sat of coas5X>i data, 
it may for exaaipis ;;om{)ris8 sha nuaibarof osagas pijr- 
ci-iased Cy the osa.', Typioaiiy, the yseraet of ccntrci data 
wiii bs Of gated on tha basis of the genetal sas erf coatroi 
daia arid irsduda at least a subsst thsreo!. A usar sas of 
-•^.^ ooasro; dasa need aot ssiways ba adsiptad tor a specific 
osar. All sass of contro; daia wisicii are crsated oa tha 
basis ef a garserai set of sKntroi data wiit ba oaiied a uaar 
aat sjf conti-oi dasa. Tiios, a sas oi ooasnj! siaia cass ba a 
ganerai set i:>Cfss please and a osaraet In ahotberphssa. 
-t-n [tf03;>| Tna sfoava-mgrsionad data packaging cars he 
carried odt by sha auihor bss'ffsaif by ts^aans et iha daia 
pssickagsng program • 9. As an aSemaSive, the autssorasay 
send his data objaci to a is>roksf. wstc inputs -he data 
coiSJCt .a.iei tha usage cosidTson;; detenrsi nab by tssa aushor 
t* !o the siata packaging prsjaram 19 ia order tcj areata a 
secara package 3, Tha actnor may aiso saii his dasa ob- 
jao! to iiis bmker. tiiatcaaa. the broker p.robabiy wants 
se appiy his owrs sssags cohditions to tne data packaging 
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a sscijrs paoksgs to the Droker, wtso rspackagesstiie data 
and acids fLifthsr contfisS csaia wfsiaS-: js fijisvani io 
rjss business activiSss, Variots o«>mb:na?jo?!s of ihs 

in tm ussr pan: 2 ot i:hs f:ow djagm!~i, ms ssscut-sJ 
paefeags 40 is; fscsiivsci by a ijssif: vsho rnuKt iB<& UiS tjser 
progsiam 35 sn order to unsaci^ags tfsa sscusra paokag® 
40 and obiain S>?e afjsa oGjiKit if- a t'inai tnnTi SO for Mssge. 
ARar usage. Si^s ssia objact ss repacf;agsd Sn;a 5:5& sscijrs 
packsga 4D, 

P041 1 Ths dHferefsl paf1s of ihs sjysism and Sho dlffor- 
8nJ sieps of tha snosnocS sccarding to ths ifivantion wisi 
:SO«f be d-sscfibed in rnors dbSai:, 

pJ042| Fig. J is J: systefti biock ciiagram «f a d;3fa object 
pfovj«sf's cista pi-osesson As nisntiprsed abova, tha data 
obisct pfovicisr nay bs an aoEhof of a data o&jao$, a?- 
owsjer of a dsfa ob]ec;t. a dnsksrof a d£3! a odisct or anyotss 
8§sa who v^ai^tsto disSodutiS a data cbiocj. whiis fstaining 
•ha oontfoi of ifs ossgo. The dstei prorassof ss a geosrsii 
Of spsciaf puipaso praosssof, prefarabiy with nswork 
aafssibiSibes. it cnsTipnses a CPLi 5 b, a rnafnary 1 1 ano .a 
rsatwofk adapjer 12, whiCh ara ffsiarconfiaoted ijy a dus 
13. As shawf? in fig. S, otfiaf naoveotbna- rnasns, such 
asadispisy uiakayboard 15, apfMarlS, aiduiksioraga 
ciovice 1 7, and a ROfi?! 1 8, nr^ay aiso da connocisd so tbs 
biis 13. l"f;s n;en-so!Y 11 sSeffts; nstA'ofkaf'dfaiacofnmU" 
iiicstior;spfogi-ams2i andan opss-ating ayatom (OS) 23. 
Aiithe ab;5Vs-!Ti8ntioried sienBsate ars wsii-kofswn to iho 
skiijsd p&rsofs mi commsi-daiSy avaiiadia. For tfia par- 
pose of tbepfesonfinventioo, !h8 marnory 1 1 aiscsiortss 
a-datapaQkagi!igprogfa!f] I9an.d, piisferabsy: aciatabass 
SO iat8ndf3<3 for con-roi dfsfa. Oapandirsg ijpori • ho oijffsat 
oporation, ono or mote dates objatss 24 cao ba siored if- 
ths s-nst-nofY i s as shov^n or st^s dijik s;!0!^gs 1 7. Ti^s 
aafa provibaf';; d£:ia processor is oorssiciarad saot^rs. 

{0f)43| Tf^a f};5sa packaging pragraiT 1 9 is used for cs-o- 
aiing cot ;;ro; datafPf CDaifoiSag ina ussaga of a aaia objijcs 
a?id tof oackaQip-g the osna obisci ano ihe c.onto-;i oata 
into a saeyra package. 

|,0£S'M| .As shown in Fsg. 3, it aompfisas a prcsgtani con- 
ff;j! nssdois 3D1< a tisar intadaaa n-ioboia 3aS. a packag- 
ing n-soduia 303,; a coiitraS dafa oraation OiSduia 304, an 
enofyption rnodoie 3bfi.:Of;Bf3rtTsorofonT;sf mobuiesobS. 
and oiia of niara secuhty fboduies 307, 
0)S4S] Tiio snntroi fnociuie 3f5i confraSs f bs asocotion 
ofiha otfismiixiuias. Tba osarsntartacafi^odsjia 302 ban- 
bias interaction wiih tiis data cbifid prov;der. Tbe pack- 
ssgiogrnaduia 303 pacssges ihacofiss-o; daSs andiha dsfa 
objsct. it bsss she isootroi data crsatior; n^oduio 304, ths 
forttissi: rrsodiiias 306, ths ssecuriiy rrjnPuiss 307 aob tbe 
snct-yption itioduia 305 as v»<<iii tjs cisachbab moro in detasi 



below. 

[~ffQ48| Ths forniai moduies 306 corppriss prngiTsn"! 
ctjds, wnich is raquitad io handia tns tsa;a odjaots in thsir 
nativaforrna;. They csnfoifsjituncSfonssncb as d.ata corn- 
s' prsssion aod d;j:ta ajnvarsiot!. Ti-sy oars ds !;r!pi8!r)8ntsd 
by atjy appropnata, camfriarciatiy avaiiadis program: 
s;uoh as by tnsans of a fouiina froEn ihs FKVyABE inc. 
Data Coft^pfassior- Lid-^ry for Windows and iha imaga 
.Aichorny psnkagf; ft'om i-iandmacie Scttwfjrs •ncorpor.at- 
•» ad, raspaaiveiy, Tt-jgy oan also ba irnplamanssd by ous- 
ton" dasigned progfanis, 

[(iM7| The sseurilx' n^sobuias 3Cs7 oompriss program 
cods rgquirsd to irnpiarna nt sacurity. sued as roors so- 
pbirstinaSad encryption ttiao what is pn>vitted by -ha ari- 
oryption ntodyfs 305, authoriaation aigoriti-invs, access 
coRiroi rsnd usage crintrc;, rsbove asid beyotjd the basse 
seotibsy inberapt ib tna data paokaga. 
(8(S4S| Tna «8!a packagifjg prngrsro 1 U can crintain 
many d!tarsns^ypaa ot both fordiat and ssourity d'fOduSas. 
Tiis p!T;gra,n-» conSroi nioduis 301 appiies tita format and 
saoubiy rnodijlas wiiich are raauestatj dy the data pro-^ 
vid&,r 

[&S4S^ Tita anos-yptiof ■ SROtfoia 305 may de any appns- 
priats. corjimsreipiiy avaiis^se nioduia, spcf; as Tiis- 

iiSJ CrypS ■ Visaa- Basic sabprogran-s feursd ia Crascent Sof?-- 
wara's Quiot^Pak Pnafsssionai for Vifiridows PiLE- 
CRPT.BAS. or a cisstorr* dasignad ^3a^:!-yR^ion program. 
(0*58] Tha cpr!in>i daia ctsaiion tfiodaia 304 creates 
ttta contfoi oata fcr ccotroiiirig jhe nsaga of f he data od- 

di* ject. An essarfipis of a controi data stfuctiirs wili be da- 
acnbed more m dataii bsio^fK, 

di5 [OOSIJ The ccnffoi data can be stcrad in a hasdet fiia 
and a usage daia fite. In a prafcrrad ambodiment, the 
header fSe coniprisas fteids ttj stora an obiaot sdatififier. 
wi^icii: onipueiy identifias tha cofitroi data anofor iis as-- 
Sijciatedda'aotjiect, a itiie, afarnsefcode, andasaeohty 

■*? ooda. The focntat code rnay rep.'-espnt tna fon-nat or po- 
sition tsf fiaSds in if>e otssgt: d-sta fiie. A-ternaiiveiy, tht; 
totiTtst code may dasignata ona or n-iora format modutes 
to ba used by fbe ats'a papKsgsog prop:T;m or the user 
progran"!, Tba sacority coda o'say represaniiha ancryptiion 
nisrhod asad by tha ancryption moduia 30S or say saco- 
rsty rf'Odiiie ft) be usad by ;h« da;a pat;i<agir(g pfograrn 
and ths usar pcogmm, 'f>fs baader fifa fiai-ds wiii fos ra- 
'eftad 'p as header aientants, 
|(!052J Tde wcaga data i'sia oompnaas at Saaal orsa tiaid 

AS for .'Storing data whion oornrois rssaga tjf the aata opiaot. 
0 ne or n-iora usaga data fiaids whieh represant one eon- 
dition for the nsaga of the data cbsset wiii fee referrep to 
as a osage siemfent, in a pratarrad emdodsrnarti, aaoh 
n saga eisn-sa at is daf i aed ny an ids ntif is r f iaia . e . g a sad pi 

t* ntanber. a si^e fiaid. whit;!} spetafies the SKe tjf the ttsage 
siatriSbt irt bytas or in any other a,osrooriate way; and s 
dtsta fiaid 

T'rte fseader eien-ienta and the usase eienisnta 
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i:o ths Lisags of she objsiS. Tne number of cor;;roi 
msnis; !S unjisTiitsd, Tt-s daia provisisr t'5ay aefins any 
nijmjjef of ctintros eSsmsrns So rspj-sissfit hfe prstlstsr- 

rssincticsn is thai the dgss packaging pmgrarri 1 8 snd ths 

iiandie slS fJ'ss CQnts'oi siemsiits, Tsite progr^j;! cods ra- 
sidss ir^ tha pBckagsng !5-!0f}yis arsii fhe ussge msjnagsf 

C0G54| Coo!:-?Jk5io>T:f;ntscariasntsin rfat8,s-"ript orps-c- 
gssw-n code wfiic!! is sxecuiad by tffS: >js«r pf ogtssm 35 io 
coninji usags of She reiassd dsia osjact. Script apd ofo- 
gs'SfP ttoae cs-n coniain Ciindi-iocsfii statemsnSs arsd -ha 
iiks whicf? ars pfooeassd wsf' fts mlsvant oi>iact and 
system paramaiiirss ao the user's data pmsessor. itwauld 
sSso be possibie to use a conti-bi atesTsent to spaoily a 
specific praprietary user prograf?i which car; oniy be ofo- 
mm from a psnies^iar broKsr, 
IpOSS] it Is svidsn; tttai tne controS data stracturs ds- 
scrsbed ssbovs !sd!jf0fi8S>!af!pi5i. Tha coj-Sfi:!) d&ta;;iri.ie" 
tufs n>sy be asfibsd in maby ^liSafsnt wsys wi!:h cifffarsnt 
contmi fiieniafiis. For esstifipis, tise pa?fft(;si5inci o' -i-sa 
fiomroJ dgia i« bsabsr class an?! usage data Is not iTian- 
bateiy, t^ijtthafrnore, fi's contfoi gierrignfs maritioned 
sbovs 8S'« but sxampies. "Tiis; contfoi dais totn-sat oiay bs 
•jniqya, a g. aiff sifgnf for difrgrsnf aata pravidsm. or <iS' 
fined ssccording ts a siafibefb, 

[O0SS| If • a op - JSTsSio n o! a ff rss: aroDodirne r5S of ! h e dsfa 
pac*;8g5r!g prsgrsiYi wgi rsow be dssoribed witb rsf eranca 
to ti^e b!oci< diaqram o! Fig. 3 and S>50 iiovy diagram of 
Rg,4. 

|OGS?| Firsr a data provider cfaafss a data objijof and 
s;5vas it to a file, siep 4D1. Wi-isn ffie sista psoi^aging 
Ofograpi la startad, siap 402, tha user imsdaea piociids 
30? prompts sha data objset provider so input, siop 403, 
trie tsesdar trirorn-:atior: oor^sistifig of a,g. ea sbisor ibot v 
•ifiisr, a s};!® of tfja dstta oiijscf, a fenTsf coda spgcifying 
any tmm moousa to be used tor eonvsi*-sg ihe U>mm 
of tha data of:«sci, ana a ascursty ooda spaoifying any 
sscuirtty moduie lo be used for add:ng tunlvsr sscursty so 
tne data oijiect Fvinharnnora, fiia osar iasaifaoe moduis 
302 pfotTipts the ds(t8 oiisiect pravidsf fa i-'spa- usaga iri- 
formaisan, s.g. f^ia cor^diitans for fha ijaaga of fne data 
ots}sct. The usags iiitofmasiors ftiay comprisa !hs i^inci of 
Liser wbo :a eiiri-iosfeecl to i^se tiis dats objeoi, ti'ia price 
for differsos usages a? ttio abjaat ate. Tba ttsadar safer - 
maiion isadma usage infoiTriatson, which a-ay b« Si-stared 
in riie forrn af prgdaterrai oad oadas, is ■ivso psasad to 
trie oontro! moduis 30 i . wiiitcb oaiis tbe paoissgsng awd- 
•iia 303 and paasoatba iaforaiatioa to ir.. 
[OesSI ~rbe packaging ?«od«ia S03 caiSs sho coairoi da- 
ta oreaiiepmocfaie 30^, wrilah first crsatss s t^saderfiie, 
then creases haadar data ci? tba basis a; tSie iiess-der so- 
foi'mstion enserad isy ti^e bssta oisjaet providar as-sd fiaaiiy 



stores tbs i^asdar dars, step 404-405. Thsr- a uss^e data 
fita is araatad. usaga data crsatad oa tfie basis af tne 
usage ifsformaiidi': entgf^d by ti-fe data providar< and fi- 
aaiiy tf -s usage data is stored iii ti^a asaga aara fsta, step 
« 406-407. 

[ffeS9| Ti'ia paci<agif!g mosuia SOS tnen appiias any 
foraiss and socufisy madusas; 306, 307 sspscffied ia Eiia 
beaiSerliie, steps 408-413, to tbe data obises, 
P«5S0| NeKt, file paoKatsing raodtiie 303 ooncaSanatas 
?i> file usage data f sis and •i'se da-a oPjsct and stores tiie 
fasiiiias atanipo-'aa'fise. s;ap 414. Tiia pacfcagiag a'sad- 
uie 303 caifs !!■;« sncryptioti mcdiiia 305, wi'sicii enofypts 
dia tajTiporary tiia, stap 4-iS, Tne ieval of sacurity wifi 
dapand somewsiat on ti^se qijaiity of sfse anarypsion ancf 
i<ey -^^atiiods used. 

imm] Fiaaiiy, ti^e pacisaging rnodfjia 303 cancata- 
natas t'te iiaaasr fise and tne anor/otad ierf-porary fi-e 
and savas tba resaft aa a aingfe fife, ssep 418. This f inai 
f:i§ ia li^e data paoivase \yrfici> may novv be diafribijted by 
tils !mn.stsrovsr a natvvork, oron siOi'^jga acedia suaa as 
Cf3-i~-?OM Of diakasfe. or by saa-sa otiser n'ioaiis. 

is> Anaxaanpfeaf itawtdadaiapackagingpragi'am 

i 0 can be used wiii now bo descnbsd witis raserenoa to 
Figji 5 ana S \n tiiig ajtarapis ii-,g data ob.i-sct pravidar is 
a oompiu-er graphios artist, wbo wjartts io distribots an 
imaga tftat caa fee used as oiip art. Put oaiy so a doauasaat 
at* or ! iis vs'iiicb is packsgad according to fi-ss mesiiod of tiia 
ifiveatiors and vvi-iion i^as i,:ja9e conditions wii:or( do itot 
panTiit f anaar cutting or paatsng, Tiia artist wants so pra- 
vids a free preview of ti-sa inisga. Oat aiso waais to be 
paid on a par nsa ijasis uaiess ti^a ijser is wisiiag fo pay 
as a rathar substantia: tea fot uniisrutad use. "frie attist wifi 
iianoia p,ayr!"eRt aad nsage ausiioaa.atian on a asai-ap 
iina so fsia dasa proc-assof. 

[»Q63] Ti>a adiat asas soaw image creatiofi appiica- 
tioa, siic!) as Atiaba'a Ptiotoshop to areass iris ia-sage, 

■*a TPs artist tbea savsa tna image to fiis in asi appropdate 
fofmasfoir dissribuiiori, ssjoii asths Graptsiajl intensi-sange 
Foratat fQsFj. 'il-te artist tben starts bia data paofsaging 
program ana sntars aa abject tdsatinef, a dtie, a fonrjaj 
cods and a seciiaitj.' coda, wbicii in tbts 8>;ai'!ipie ara 

-t^ '-i234.fi67ff.i3-, -ia-;ags".''a": and "b", raspaativaiy, ia this 
SKasrtpie. sha fon'oat oode "a" i-idicssss fi-sas i50 foavis; 
cads neaa fee appiied, ana ti'iss cada is seisatad giuoe 
tijo GSF fofO'ias is appfopfissta and aiready coaprsssed, 
FutthanTsera, tfte saaority oode "t" indicates Si^at no se- 

.40 cuBsy moduia aasci be applied and tbis ooae is saieaSad 
since tha security aciiievad by file anoryptioa peftoarsad 
by aieans of fha anosYpdon i-anduie 305 is censiderad 
appnjphase by siia artist. 

P(f64| Taen tPs Siliss antars fiia diaf-ijp pbona nijrePar. 
45 ilia price for a singia use of sha image and for ufsiifatfajf 
use of tne data otjjeot, a code tar asage typea approved, 
and for nijnnber of asagas appajved. For t::ifa puspaae, 
ti^e user intarface atodaie 302 tr:ay dispiay a data entry 
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{mm} Below, ariQShsf smbodfmsnt of tns dsta pack- 
agifig psxigram 1 S wiis be descdbjsd w;5h rsifereixs: to Fig;; 
7-"i2b, Sn ts^is sxsmpfe, ti-is data ofesscJ cor^sists of a vidiao 
TiisTi, which is craated by 3 fiisT? csnipsnv arsb sent io s 
broker togetbsr wsh the ps-edeiemisisd corsdiliOfis 42 for 
•isago of shg vidoo. Ti-w broker ioads tne video 24 to the 
buk SJtersge i 7 of hss data processof . "ihen, h« usss his 
o'aia pscsagiog pjTjgrar-'; JO to cmsts a gsnsscs: ser of 
canti'o} data 50 bas;ed on shs; predstsrfninsd oosjdittcins 
42 f«f lisags incisoated fcjj? the fHrnsomosDV, Furtriermore, 
?h«! adtsress ro tiSe vidsso in fhe bulk siorsjae ^ ? is sfefsa 
in at) addfsss table in Cie oontrol batabaas 20 or some- 
where ssiss in tba f?5eff5ory 1I . ^; couid aisci be sfoo-sci sn 
t?is gsiieraS set of consros da-a 60, R? iSfiy, the gat lerai sst 
i3f ccsr^f ro! fiista 5b is stored in the co??troi detHbese .SO. it 
cooid aiso tje sSjjred soroexfrhere sisa io 'ks oiarnory 1 1 . 
Affer ;bes§ spejHioos, wbtoh oorrsspond to stsps 
401-407 of Fig, 4. -he data packaging prsgrsm is exited 
pt)gSl Fig. 8a Shows ihe gsnorai sat of oohiro! oata 
for b^e video aocoriS ng -o tbis axsfnpSe. l-iefs the con-roi 
data it>siudas an idebfifior, atotb'iatcode, a sscudty oode, 
tiio rsump^rof !Jsagg9i§mgr5t3,tf^ssizg of tbedata otjjgos, 
the S!2a of tha iisage aianiotits at -d tiivcs usage eismaf ••s, 
aast; compbsif^g ao idsntifisr fisid a si^s figib aod a oata 
fisSci, Ttie identtfiar oja^ da a ut-iqae n^itribar to a sakss 
f'sgistsrsci tortbe particusaf bfoksf, isi this exarsipis, tt?s 
idantitiar is "1 234567Sr, tiid tofrriSi eoda -001 0", Whiofi, 
io tivis sxai-npia, iiidicates rha fomiai dt a AVS vidse atid 
the secLSfiiv cobfi is "0019'. f ortbso-nofa, tea fsrer issege 
biamabs dafinas lha socaptabia usars tor tha vtdao and 
the gocood iisags esaroasit data batinas the noeifegr of 
vi« wings of ths vidao purcbaseb by a usar. The fifst usags 
eiatTisot dats sg t wh iab, for ihe porposes at td is exaoipig 
wii i sigr^iiy that of -iy edocstioo sbented yssrs are aacapt- 
afeie to tiia fiinr company. The aata fiaid of ttie sscond 
osage eisrcont daia is eospty, ssoaa at ibis ssage no -s 
iogs of ti-iS vigeo i-tas bean porci-saaad. 



100701 The broi^ar vv-antato iransfardata oiisiacts to ys- 
gf~s 3od sjrisftis contmiiad usagsj ;;i rstorn for paymont 0? 

'> sjssaga faas or royaiiiss, Maosgsog the fofokar-tisar buai- 
fisss fsiatiORship and Bogotiaring ths traasactsor! ba- 
iwasit! the i;;roi<8r and the oaar li-io botii iiis a-itofrsaied: 
and ii^a control daia strisotuta c-sti; pravids t-sniimiiad si^p- 
port :0 tnasc opefstioos. Tog pgyroent cs:n be bendiied 

?» by trans;ft>!tt!rsg ci-sdss card itifarb-sa-iars, or tbs usar cm) 
have a debit or credit soiourtf witn tne p;'-oi>:er xvhigh is 
password activaiad. Prafarafoiy. payrnsoiahouid bas-on- 
firoiad bef;);-?; fi'^e data object is f:t5nsferi-ed t-:) ti~ie oser 



[0071J Wiian a sjasr mm to usa a data -^biact, i^a 
comacte the bfDs<er aod requesis authorisiation i'or osage 
of tha data oojact. Wbao tha raquaai for aoshodaation is 

--^i' fscsivsc! in tho broker s data procsssor, a data pro-gmn'i 
oon-sparijs fba tissue for wfboh aoshofiaaiion is reqijaaied 
¥ififb the usags contmi eiamefits ttsa oofsicoi data of the 
daia oljjac- to sea if H ooropiiaa wsjh -ha predstarrninad 
cof^ciitiofts for lisaga iadicatsci tharain. Taa oornpanson 

iS' may inciode compaang the user type, ifxg lisagg type, 
iha hijrobar of oaagas, tha prica ate. ittha rsQosstad ys- 
ag-3 c.ofnpiigs wish tne prgdetgnTiiaeo ooodidona rhg ao- 
fndri£aiior( is gi'sntad, otharwisa i- is reisatad, 
pje?2l pig. 9 is a oafa flow diagfatri of trie oats pack- 
agirfg on iha fatakar's data proc3ssor< which occura io 
raspohsa to a grantsd raquast tron's a usar farausborisa- 
hoti for iisaqs of tne video. SLg. e granted rfjqoestrorthe 
pi^rchasa ottive \:'iawinds. 

|'{f073| in response !o a graoted re-rjue-rf, the broi«ar 
-'S s-gsifi applias iha data pactcagiog pi-agrarn 19, ITfa gen- 
er ai set of oentrai data SQ and the data obieot 24 aca inpot 
!» ti^e pfograoi from ff^a oonitoi da;abase 20 and tfje byii* 
stci-aga 1 ?. r^spaotivslY, Tba prograt?: crsatas a uaar sat 
of oooti-tsl daiaOO oa •no basis of ftiegeoerai sa- «5f cootroi 
data 60- aiid coiwalanataa fiie osar aef 60 aad tiia data 
object 24 to create a eecore da; a pataage 40, wtiich may 
tiian ba tranafan-ao to tha asar by any sosabia rrjaans. A 
copy of tne ysef sat of control data is preferabiy storad 
if] t'm brokaf'a coainiii databaaa. This gives tha btokara 
rgcofd With which to ccmpars siibsaqosot use, e,g, ws^an 
a diai-tic ss rsqyirad for osaga. 

f^ig, i O IS a flow Oisgn^m of an ssampia^v pro- 
cedora sjssd for c-aabng a tissr sat oi oofi:n:if data and 
far packagihg tiia usar sat of coiifroi data and tba: video 
■40 into a seoore pacsage. i-iera. the procedore witl ae de- 
saribad wish tafarettoa id tba ganstai sat of cotsroi data 
shown in Fig Ba, 

[007$| Tba ysar set of aontroi data SO, i,8. a set of 
coorroi data 'whfgh is adapted to tha spaeific oser of this 
t* example, is craatsd in sseps 1 00 ■ -1 0Q3 of Fig. -i t . Fis-st. 
tha gahsrai sas of oonSroi ciata 50 stored la tas controi 
d;star)ase is copied to areata new raotas! ds: a, step • 00 1 , 
Sacn.td. a new idantifief, i^era M234.56?"90°. wiVioh 



7 



13 



14 



LsniQiseiy ideriiffiss sne user sss of cos^troi data. Is stored 
ideniijiei-tiejri of hs; rs^wconir&i ds'a 6f5. s'sp 'iOOK. 
Thsrd, tfi8 dais fseSd d ttss ssjond usags sierngns is up- 
dated wish trjs usagg p«:-c?!assjd. i.e. ihss sKampfe with 
iwo, since iwo viewirsgs of ihsi ¥(dso wsfs pufd-sasisd, 
step 5 0S3. 

|0076| Th® if!^s-C!sa!«d ussf se; of cot Ki-si data, wfsich 
cc!T8s»onds SO tfis gsnsfai S8i of corsfo: dsts of Fig; S-a 
is shown irs Pig. Sb. 

|08?7| T{is ussi- SO! of oofiSJxjf dstsi is sior&d the con- 
rrnS jMsbass gO, sfsp 1 004. Thsrs, tns vidgn.. wjiich is 
siofsd !!•) oulk ssofagg i7, is oopfed. sfep t&05, 7"ns 
coev' 1h9 vidse is coficaisfiated wrtfi Stig user »!St of 
controi ciaia, st«p • 006 . The sssciistiy ciiPa 001 0 sp«3C)fies 
thav tfss s■^^i^s dsfs package 40 is to so snctYPSad and 
tiijsf tn« usee prsjgfjssT: 35 rnusi cofitasfi a ksjy which ca!) 
da appiiod, Acoopi^tn^ly. iho whofe mx& psmge is on- 

cfvpfsa, sffip ISO?. Finaiiy, fhe arscrvpfe^d ^sta packsgs: 
IS stofod Of"! a s-ssfsgo f'ftadfs or passsd to s fiattvc-rk pso- 
gfarw, step 10C38, for furehortrafisfef so tPe yser. 
|C<878) FiQ. i 5 ;s a :?>aniory smaos of ths video 2A atsd 
tna Lsser coojroi asm 60, The ussf contfol d.at«s ana a 
oopy of djo vidsa 24 are cofscBfeostaiS a« shc!is.'i5 in Fig. 
\ 2a T^e snciYPtS'S dasa pao!<ags 4D ss snowri in Fsg, '\ 
{m'm} Thg proceciurg <rf Fig. 50 can feg sjrjpiBniemgd 
by ths Oasa pac:Kag:;ig progrsm of Fig, 3, .A.s aii slfeoiaSivs 
to tne procesyrg ot Fig. 3 0, ihe tisjsr set of contfoi ciata 
can be cfoaisci as sa sfeps tooviOGS of;P savsd tf- a 
hgacigr file and in a asaga oaia fiis. wt^srsafter stgps 
408-4 1 6 of djo dafsi packaging pmgraas of Rg, 4 ssjn Pa 
p8)-foa-ned jo craaso tPa ssciim oafii<age, 
|Q08G| The ;jisovo-descdbsid prooessfcrcrgssfirsg s -js- 
o.i-adsatso sat of oontmi data rnay aiso ds uaad ~py a 
Liser who wants to fBassSdfot:;B a daSs jjfojsc! or by a bfoicgr 
wdo wan-s to ciistf louse file daia oojocs !0 oihor broksrs. 
ObvioLisiy, mdistnbaSiof; nf ma dats objecs rsi^uis-as that 
reidljS'dbofiof: is a osago appfovaP of in i-?a asnSfoi dsta 
of shs data oisiect, if so, ths ussrof si>a srofcac crsasas a 
uaer ses of cot ••roi Ps^a by sddiog fisw corstfos oi«;f naf iss 
«nd possii^sy oiiaaging tno data tiaicis of oio cpntro! sis- 
fnafitto fsfiata ttis fijiaSbn tsetwa-sn iha aashar af5d -ria 
cui-fspt yaes/isroi^srand bsswoon liie csjiTsot lissdsfokar 
and tna futarg usss-ftsrosaf. in tiiis way. an aiidit Sf^si: is 
otOsJiSed, 

POSI) Tha us;e)"s o'asa processof< wfjiob Is sSiOwji in 
rig, 18, is a gsnofa! orspaoiai p-jsposa proeasaor, praf- 
8!-at;iy with network cspassiifsas. !! ecimpfisas k CPs,; S8. 
a Piemory 2S, anb a nstisvork adapiof 27, i«nloh are isi- 
tgraannactad by a bos 38. As shown ifs rig i3, oShgr 
cooveniionai moans, 80oi"i as a dispiay 29, a koyPoatb 
30, a printer 3^ , a soand systsm 32. a 30^4 33, and a 
Ouik sfcifagjj dovica 34, fnay aiao ba oonaectad io -ha 
bus 2B. Tbs niesT^onvf 26 ssorss oss^ivofk: and laioPomiTiu- 
nscations prog:raais 3? and an opsraling sys-orsj (OS) 38. 
Ai! tha abova-n^ofsionaa ssemeats ara wafs-KnPwo to tha 



skii!«d parson ana oommerciaiiy avaiiapia. Portfta pui-- 
posg of !:hs prssanS snvantson , the nigrsiory 26 aiso storss 
a Lisof prtJQrasT! 35 sad, pfeferabiy, s^daiabaseSS inrond" 
aci im the eofisros data, Dspetiding upon tda currant op~ 
:'i sratson, & data pacfcaga 40 can be stotad in '.:ha n-satswty 
26, as shown, or sn the buix storags 34. 

IMi5§8r.gro3r§ai; 

?» [ftSSgl 1 no user progran-s 3$ oonfrois tha usaga of a 
data objs«i in aooordarica with sne controi dam. ^disb is 
inaiuded tn the ba-a paokago tagsshsf witi; the ba-a ob- 
iact. 

A:5 shown in Fig, 14, ths ujser program '35 oom- 
pi-isas s program oontroi moduto 140i a sjsar intsitapa 
rr?odois 1 402, a o;;a§f; n^-anager meduia a eoniroi 
data parsarrpobuSe i 404, adoctvpttpn ■r;pduia s 406, pno 
or mors fofrr.a! modoies 1 406. one or r^xsre .sacorfSy nsna- 
uies i:4f}7, sod a fiSe tfsnsfer ps-ogram 1 408, 
|"f56S4] The contfci n-^oriuia "i ^tbt controis sha aKscution 
of iho oSfjar modulas. The usar inierfece moduie 1402 
fiandias intaractions *-!;h tiia asar. Tna usaas n-ssnaper 
n"(obaie140Sonpaokagssthes;isoufa packaga40. it uaas 
tS5a poasfpibats parsar motiPle ? 404 , tba daarypf son rjiad- 
iiSJ uig 1 40S. fha fonfiaf niaduias 1 406, anp ths ssoarisy rrsad- 
ules 1407, 

Tna farnias: rnociuisa 140S cofiipnsa program 
aode, which is nacaasary to hanbie the data objeats in 
tdasf oafiva forfnat, such as dacamprsssion aad data for- 
alas proaodores. Tna sacsjritv' mooytas V4.07 cos^ipnsas 
prpgram poba i'oouiraci ;p siTipSan-iS.nt aecurify adavo !he 
i0Wf:S! iev<;!, such as access cantroi, usage oofnrsi and 
aiora sophfSfcca-ad boptypsipa tdan whas ia ptavideb Py 
i?5e basic decryption moduie ^405. 

PS |0G86J T'detjaarpi^gramSSaartcoi^tainaianydiffarent 
n/poB of notn foixna! arid .SiXiuriSy n^adnias. t-towevar, thay 
shouid ba BOfnpiatnefjmry witS; tiie farrnsE aad ae;;ufiiy 
mobuias usab so Ins porrssppadipg data papkaging pro- 
grarn, Tha osaga raanager rrsaduis 1 401 applias tSia far-- 
pias and sapphty mpdaios wfiich are noc<sssafy to usa a 
basa Gijiscs and which are spedfiac! in iis ccsntfo! data, if 
ti-(a properfopTia! and sacurib^' n-ipbu!ss are not avaiiapia 
for a parSicolS!' data oftiscf. |ha usage rnan.ager aiodi^ie 
■i40t wiit rtO' peaai- auy usage, 
[60871 Tnadacri/pslonmobuia ! 4Otj GanPstt^0abova~ 
afentionod FiieGryp; Visuas Basse subprograir:: or son-e 
oiiiar cpo'imsrasaiiy svaiiapis dacryptian program, is can 
aiso be a caslom dasignad bacsypisan f:»dijte, Tha oniy 
raPsiiotion Is ti^ai the bopivpitpn modPia used in sfia user 

'f-a prograJTi is compie.mantansf with ri'ja encn^pjiou raobuie 
of ihe baia paakaging psxsgs'an':. 
pJ6S8| The coatroi data oaaser n>odi4a "i 403 pafforrns 
snio ra-ifes'se proaoss of tha contirai data creaiian tr:oduio 
304 in Fig. 3 

[6SS8t] Tna user pasgfan; 35 can tsave cade whisi! cart- 
tfofs uso of sps prpgrsn-! by pasavvord or by any pther 
soiiaSjia mstfjod. A passwoai may ae addad In a passr- 
lii'ord poatrp! ataniaat during papi<a§iag o? daia opiaot. 
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"fris passwoffS !S tmnters-sd to tS)s user fey rsgisjsrsd sTsaii 
Of is; an j? othg;- jjppfopnatg way, if? response lotf'S prss- 
sncs cs? iSis password ccMrtiroi slerrssfit ir- ji^is co!?tfoS dsia 
ssriicsi^re . ths ussr program prosT:ptst?;s user to snput ihs 
passsiford. Tng irsput pssswsr^! is cssjTipsred wSf; -hs 
password in tno comres ds-a. arsd it tiisy matcSi, the user 
p?ogf&fn contsntiss, oihsrvusse IS is ciisabisd. 
P099| "Ti^g user pixjgt^n-! 36 csii also Jiave pf oosdurss 
S5i>?!s;h Bihit the bs>?avic;r of She prngrsji-s ;e.g. provitsa fii- 
r®fs for cf ■iidrer;} ascofOiftg so the coriiro! data oS ti>s user 
obifJOi: 4 , ,ir is irnportstit to iTjsjrjt; fsn thaf !hg user progr ar?! 
35 i50v'8r s;ipr«s ihs c-pieci »• native iorf>ia1 ii? us«i aocss- 
siSSe ssoragg arsd •Srst during ciispiay of t?!0 dato object 
•jio pnu: scrseu ii«y is in-pped- 
fOSSI I TtTS m transfer progmm 1 408 osn ti-apstor and 
receive fiissvsa netwofkiosrsti frorrjoiiiertiata pra«j;5S«r 
(00921 £--"e .iia dats; c-bioc-S :& ;■aoa•?i^■:5c;.a0 ir:--; v^e- ie- 
cure paoiiags afser tf\t: usugo. iiie !.;ser psograui shoijia 
aiso iiioivids pfogfaiti coda for rapscka-gipg tpa dsta ob- 
jisct. The program cods coijid Ps the same as ihsa used 
inthscofrsspofiding daisspasisagingpfijgfasf ■ "i S. itcosiiO 
siso bo a sgpss^iss srogrsiTs w^ioh s oaiisb tforo ths user 
;"3r(i9r<:r;>, 

|00g3| The opgrstion of an sfTiboaifneu; of she user 
progs'Si^^ 35 wils siovv bs dsscn!>sd witP refarence to -i^s 
bior* diagram of Fig: t'^and theriowdiagfam at Fig. 16, 
|OOS43 Firsi the tsssr recaiv&s a data packsga 40 via 
tiis wanster ovar a natwoi'ii, or on a siofsgo rpsdia such 
?3S CD:-RO?vS or disKoSe, or by any jsi^sor apprcpriste 
p-;oans, st«p Ha ibars storas she data paci<aga as 
a fik; on his ;3gd;?s pf;>csss;jr. srap 1502. 
I" 009S| VVil a !i ti la user nts to u so ti la data ot>|aot, iia 
S'Srrs iae ijsof program 3S. step 1503. Ti-:gn irg reqaeats 
•jsaga o! tiia datu oisjact Btsp ISO^. Ti?e reqjjeSS is fs- 
oesv«d by !fia us>3r iiirasiacs px>dijis 1402, wbict-i notitlss 
ti:io«s;nif»ir;-sedLi!e 1 401 oftha ijsage rsqoss;. Th8so)-:tfoi 
niadula 1401 caiisriio usage msiiageroioduis 1403 «iio 
passes tiia ussge rsq«eo;. 

|O0S6| Tiia iioaga ■Tiai^agantioouis i 403 roabsthe for- 
msr eods f rsm toe bata paci^ags io doier n-iioo ■fie co) 'tr oi 
d8!a format, Tfien it caiis ttte basjrypibn rnodijis 1405 so 
dscfjspt ano extraot t'se contfol dafa from ri^a dasa pack- 
age. T?-:® usage rnanager fnosSois 1403 applies tfsa da- 
osyptioo mobofs 1405 jncrerosotaifj? to decrypt ooij? the 
canto] data, FiisaiSy, itstorsstsiacofjiyoidata m syamoiy, 
ssep 1S0S, 

|0W7| Ths ijaagerfsanagBr rnobuia 1403 ■fiaocsiis 'fie 
cori:U^>idataparsar!T(Obttis ;404io aictfaosttia OsiaSaids 
ts-DSTi -fio u.sage eisirionts. 

pogg] "Ti^s usaga rfjarsagsr f7iod>;!io 14(33 tttesi aorsv 
pares tins user ragusst for Lisage wsn tiio Borrespondiag 
ci>r{{foi data, sistjs 1506-1S07. if ii?a fBouasted usegs is 
noi psiT!iittso dio cootros data, tbo raguastsb usage is 
diS3bi«d,step ISOa. riovifavor. if !f>a regi.:asS;3Ci usaga is 
afspfovod otit-; tsiecomroi data, tfia usago manager inod- 



uis 1 403 appsios giw fOsTPat snd secs^rity o^odoies 1 406. 
1407 spsoified in sirs fieadsr sata o" usage data, steps 
1S09-1S14. to ihs dais pssciiaga 

Tnen the issage nianager f:T50bu!s i -403 caiis tiis 

s becsyp'ion modote 1 405. wftieh decrypss ihs ssbjoiS data, 
step iStS. wpereafter siio rapviasted ysags is snabied; 

If! Ciinnsr^tso-i vvtti'i iiis eoatsiing oiri'ie ijsags, 
iiwcGotrsi data may iiasb to da ijpdatad, stap 151 7. lite 
sofirroi date msy for irsstaftos eompriss a data fiatd indf- 

?« oaliiig a iimitad pijfnbar of usagaa. ff so, ifiis dasa Said is 
ciecretTsented isy one in response to tpe anabiirig of tne 
usage.. What) lha rssar sias finishad usage ot iha data 
obisct, sfie user program 35 restores tho data pacsaga 
in rhe seoure ffjrfn by rapaokagiog ir, atep 1S18. Mos} 
oartiouiariy, the data objaat and too usage eismas^is ara 
recoocatoaaied and poenorypEod. Tfjsn if-se f-!e;jdar sis- 
r-ienis sra addad and tdethus-oraaied package is siored 
in {ire {jsera dato. pracasisor. 



[OiOOJ A spec-ifio- axampie of how tfia uasr pfogram 
opO!B!es wiii ocfsv be dascribad wiifi refereoce ■» Figs 6 
ana 1S, Tde axan-spis is a continLfafion of EKampis i 
;s> afJOVB, -A'bera an arSisi oreated an iroago and seof it to a 
duiieiiti board. 

(§1Q1| Assifme that a user has found tna trnage ar an 
aiecironic iirjitatsn board (83fe) snd is intrested -.n usirig 
it. f^ethen ioads tna data pactcags 40 containing the sm- 
sga to i-tis dssa prooassor and sioras fS as a file in sha 
diii!< stcra^s. Tfie user man exeouSas tfi:e user program 
S5 and rsqtjests to p^f ivis^tha image, TiiO ifsorprogram 
tiian pedopTis staps 1605-150? of the ffovv diagram in 
Fig. 1 5. Ttie nsqisest for a preview of tiia infiaise is com- 

ds pared ysiSii the data fiaid ot tns usage eiameni "coeia far 
usage fype approved" . in mis esean-ipia, rhe oode fQ" des- 
igcistas tiMS prsiVfewsare penrilSed. Thus, tiia rijcjuestsd 
pravipw is OK, Ti^en, sfis user progranvSo parfcmis stsp 
1509-1515 of Fig, 15, Since !tie fonfta; oodfs "a" and 5i)a 

-*o security code Ij" of t.ne hoaoar gate indicate fitas oeitnar 
oonverssion, nor decompmssfoo. nor sa;;onfy troatmon:: 
is reouirsb: tds user pfogroiii onty becfvpts tne obfact 
data. Tiia usage manager moduie 1403 tnen oispiays 
iiia praviaw on iha user's data procsssor and passes 
coniro: Pae-s; So tne user interfaos UOiS. 
[01021 VVi-isn ;hs user is limsi-ied previewing •f-is image, 
tne user interface fnoduie i40g dispiays tne costs for 
usage oi ffse insnge in aooofdaiioe wish iiie ohca usage 
data of she contra! data fprioe for singta use'' and "pnoe 

AS for uniiifjired nrse" in Fig. 6) and prorripts the user to entef 
a purohase feqnasi:. Ina nsar deaidas to buy uniitiiitad 
use of she image, and the user intarfaoe mioduie i40g 
itrpuis pijrciiasa snforts-sasion, such as an idantifioaiion, 
Piiiing, and adarass for tfiat foqosst and passes tne re- 

45 qs.jost !o ti"te controi motioie I4r}i, The comal rrioduie 
oa{istnafiiaS!-ansforpro0rami-4O9,wb!Ciidiaicstl'5eartisrs 
diai -np number as indicated in She -jsage d;sf5i ("teoniroi 
Siemens forarSisfspho-ie nusTiijer'' in Fig. 6; andtranasara 
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the feqiiest siid pLifchass :?^foffr!StiO!i to a broKsr pro- 
gfanrson ;:h8 artisi's date pr&c8sser. Upon approygl of ths 
purcf-fsss, the ismker pfograft? rsturas a Sfe ooniaifsusg 
an iJiJOtSe for "iisage t>'ps appswsci'' contros s-ssn^snts. 
T^is lipdsiie is '"iO" tor ine ijsagg i^/pe fjpprtsved, whic^s 
In tni.'S S)5anYpli? indicates iha! unliriitsd u&s by shat usor 
;s pS!Tn!ttS;d, TSisi fsis tfarsssfgr ps-ograsi-s 14DS psssss Shis 
updais so ths usags imnagat mo-ciute vi&S whsch wp- 
dateB coniro! dasa ^sjkh the "iJStsge jyps approved' 
code. TS-(8 tis&r snteji-'sco sTioikiia 1402 the;-! dsspiatj-s a 
oorifisTfiation iTjsssf-go to tha ligs-sr. 
P103| Subseqisarsisy^ ths uiser tfiiedai^ modsiio inputs 
a rosjugs! to copy rha inisgs to a nio psckageci soco^'dtng 
U> this ifWBfsS;;;n, o?^ She ijsore msc?5!nsi. The ijsags 
agsr moouis thsi"! oor^ipares tS>o user request opntro: da- 
ta. Tno usage sxianager mcisute raxarjsn&s the daa fited 
far ''usage type appi-pvea", which now is ""i (3", T ^he usago 
manage!" rnodySo copias She image So ti:;a tiia. 
|0104| men tsio usai- is Vmmm with the image, ms 
usags mahagsr niociule 1403 rapacKaigss !:hs image as 
Petofs sxcjspi wish updsisd controi da-a. This tspaoksg- 
irsg pmcess is $xacfiy iifce Jhaj sh!;wr> in Fig. 4. sspsds 
rhaitn® h®3dS;r;3nd usage ds^a airsady exisJ, so ihe pr;3c- 
sss stsrjs #!ef stsp 406 wi-isra coasroi date is orsajsd, 

101 85| if ti)& data oPtsct prdv'idar wsiits to jiiipr^Ji/s ■ ha 
saoLiftiy of a ciata pacitaga cot^tairiing a (Sata obiaci, a 
sscij.rtiy moOiiio 307 cositains'ig a sopi>isSiCi3t«d anciyp- 
tion aigoathm, suoP as RSA, cousd ba i-sad, in tn:stpasa 
?ha pi3C><ags!>g rnodnie 303 caifstha secarlty moduis 307 
in ssBp 412 at !ha fiaw cisagcam ot Fsg, 4. Tj^s saeunsy 
!T;edi-;e arscp/pLs td-j ijTjage and passas a sacijrity asgo- 
hshai cada to ttia oantroj data craaiion moOuis 302, wdich 
adds a eoaJ?«i aiement far ;!ia secoaty modwie Koda. 
which wiii de doiecteci Py Sha user ps'ogram 35, Thafi sha 
baia packaging coatihyas with stso 4 ;4. Vi/narj sha data 
pa;;kag-5 is sen; to the u^sr, the pubiic key m mailed io 
tna usai' by regis^tej^d hiaii. Whah the usar pnsgcasTi sa 
e>!a{:uiad in rssponsa a req-iesi for [iaage of Shis dsta 
oisi-act, ti^s usage mahsgarmpdais wisi dateat tiie sesLipsy 
maduia caba in trie contfoi bata and caii the seaijrity ajod- 
uio. Tdis sncidaia passas cantfoi t» the user into'^aca 
rnodnis • 402, wiilch reqaeste ths aasr to iapat iha pubisa 
key. if tivs kay :scotrs(;!< the iiseraeoofiiy modais appiiss 
coaipiamahias^ sacfYpitoo uslog shai kay and passss a 
uaaga apprDvsdf'iasssgatotSje asagan-sanagsirsfioduie. 
Which anaisies tha uaaga, 

|0t SS| As anothaf axaanpis of improved .saoarity . a ss - 
casity mobaie niay snipiaaianJ ar: aathas'Jtatiah praaass. 
acoa rd ! no to wi^i ;0h each uaage af ■ ha bai a objaot raqo i rss 
a dsai-up ta tha data processor af tha daia oPisat pravioai; 
Whoa tha CO? a-;apandiag aac.arii-v :Tiabuia aopa ia detect- 
ed dy iha ijsar prisgrasTi 3S/tha reiavant seenaty modais 
Iseaiiad. I'nis aiadaie passes s ■■sqaast tar aatharissSah 
to the coatrsj! :rf:i3bule 1401 , whicn caiis Ihe tiia jranster 
pragrahl 1 409, whiah diai tiie data aPjeot previdsrs diai- 



pp nyaiPar, which is Indscatad sa a ysaga slsmant and 
traasiers iha fequas! tor aatho.^iaatior! of asapa. upon a 
grS'itad aatdariKaSjoa, tha da>a provider's data procassor 
rati-srns a usage appcovsa tTisssags ta tha assr seci-sary 
'> atoduie, which forwards tha approvai t! ttis asaga control 
aiosuie, whish saaiJiss saa asaga. it the hssr t'sgaasts 
t-irther asages of -ha data objaci, the aaihofisatiGO pajo- 
83S is repsatad.. This proaaSoras resuita iii a pernianant 
data osiect sacarity. 

?a 

[S'tO?| A hffsftarspactiic asarapia of howthrs asar pro- 
grarf! 35 opera-as wiff now ba daachbad wifS; retaraace 
to Fig, 18, The axaJTipfe is a osntiaaatipn of Exampia 2 
abova, whare a user pt.srtjhased two viawiags of a viaao 
tilrj"; i^roiT! a profeer. 

(810S| Tna uaar waats to piay tha video which was 
pi^ronasad aad tasnstarred trctr: tiie broKar, T'ha asar ap- 
--i*' piiss the user pragran'i So. step 1 601, ana ragaasts to 
pisy stie yfdao. S!Bp 1603, The ysarpragrarf! 35 firsi ex- 
saiinestt'easefsstofccatroiclataSD, step 1603. inthis 
axample< She ussr program 35 coniaiaa oniy ti'tosa tofraa; 
ana sacuaty a-!nat.!iss for osjaats with foi>T5at cods at O0 1 0 
and vyitti a saaofity aoda of 001 0 Coasaqaaatiy, aaiy 
those types of data oPjeots rnay Pa used, S! tha program 
aaaoufsiers othar codas it wti! act anabia tha usage ac- 
tiot),s;i:e» 1604-1 80S. 

:^a>;t, tha aaar pfogfam 35 caniparas ttta first 
cohSfoi eiamari! data which is 1, tor adacaiionai users 
cniy, ta user intohriatlors entered ijy tha usar sa raquast 
of tha ijaar pa>gfajT!. Ssnca tna -jsar type antafad dy tiie 
Psar is the same as that iaiaaiad iatha first osage aiainerit 
the praca.ss oontia-aas. staps iSOO-ISOJ. Then tha usar 
ss prcgratTs chaoi<s the sscoiid controi efanisi^t data which 
specihas tnaf tha narnbar ot piays parchaaad la 2. Coa- 
sapaaoiiy. She usage is snaPied, step 1603, Tfta asar 
program sapiias sha asc'Vptioa rncaufe with fi-^e univarsai 
key aitjt tt;a AVI Soana; vibao is dispiayad an the dis;play 
uait 29. Then, the secoati coatroi efeais-tt data is dacra- 
menteti by orta, s-ap 1610 Finaiiy. tha vidao is rapack- 
agad Step 1 SSI 

impiementatiors of VatiaPie arid i:;xta!»;b!e Ob{ect Coiv 
*^ tii; 

[Cf 1 1 0] Oisjeat ccatrei is schiaved tarcagn ths iatsrac" 
iioa of the data packaging pfograro 13 aad ttie asaga 
program 35 with tha eoatrai data, varisiiion of oPjact ocn- 
nxsi can na appiiad to a parSiooiar oPjact by creatsag a 
controi data farrtiat with contra! aiaaisata dafihiitg the 
contfoi variation aad Shg cinjurnstancea io wnica tfea var- 
iation is appiiad, Prograa) proosdsjras shouid than be 
added to prognam moauias to process tha eoatroi aie^ 
meats. For eKamplai tsappose a brokar waais to aiiow 
Students ta paat a aaiticutar arttcia fcr trea tsat rs«?aira 
dijssaass asera ta pay for ip Fia detir^as «>atnoi aiaments 
to raprasant tha usartypas student and Das:hess and the 



as 



It) 



18 



26 



associated costs for aacf^. hs men aads jsrogfarn tegic 
i:o gsamifsfi she usef typs and cateiiisSe costs accoitiir^gfy . 
OiHect conimi ts sstensibis in: the ssnse ms^ contfoi 
data fcnnat fian *!8vs ss i-nany sisnisnts as there srs 
psitsrrisjfefs cielsnifig the nifes lor obj«ci coriirai. 

ion 1} Obisct secut-itjj is 8!so acJiisvsd fcreugh tfse in- 
tgraction 0? !hg rfsts pactecsirsg progfafT! 1 S arjd ths ijissr 
jifocifarn 3S w':tt- the cofA-ol dara. Sscuriiy pfocsss afjd 
sacfyptson/sscfYpson aigorsftii"!? can fee addsii ss sfo- 

to a pgrt!ss.ifaf object creatlag s aof^s-o! csais tom'iaS: 
with coriiro! eimiBnts ;^«fin;ng sr^e seoufiiy varijjtiori arjji 
the oii-cumstsiicss isi wrjfch the vari«!icf: is ap}>;isd, Pto- 
gssni procsatires shasjid b;; added to program niaduias 
10 process the comroi siasrionts. For e^smpte, suppose 
a broker wants te appSy minifriai sgi;i4;% so hss ecsifsatsof- 
of curron: f-sws articles bi.iS to ;5pp!y tigh! sasijrity to [^;s 
sacyeiopsciia aad ts« beo!<s. Ha dsfiiios a eostfo; efe~ 
smfsr for sacursy type. Fk; then sods prags'Sif?': Sogk: ta 
auplyttis security eigofitarrssaccordir^gfy, ObjsasecLirtsy 
is axierisitjia sfi Sie sease that msjitipie igvess of sscufRy 
can Pe ap'psec, l"hs icve! of seoutst)' wiss of course &s 
depe!icis?>t en ?i^e asicfyptien/key r'istnodvV'tiicH is iaipis- 
!T:«nt<sd tr] iiie socurSy raoda-es, Orse fevsi of sac-jrtfy 
ms5y Sa 1:0 rcqusra oofina confiraiatsor! wpisn ieasSias a 
osta cOfscf to tng user's dasa prooesson This oaa bs 
ifopiemonfod sh proigram coPe ih s security moduia. 'This 
peaiiits the broksrtachflck tiiarihe object has aist aire;js:iy 
fjeea iosdsd ss wesf as douoia chsck ai; otfier pai«iiie- 
tsts 

P1 12] !s is aiso ia>co)'ant to havs yer-Sion oohTroi with 
tir^a sta?7ipir^g oatwraentf^e ijsage pr ogf sjt; ar?d fha asers 
cortlK>t ds-dabase. DJfjerwiiJS tf-s dafaiseso asn t;e dijpSi- 
osteci snci rsappiied to the oserprogi'am- The user pro- 
gfstit? can piacs a fitno stamp in iha contaj! dalsbas® aad 
iii 8 hidda ii systei^-? tae each tirrie ihs co:ritm; sasabasg is 
accassBCi. if tha tiajo starnps ara aot idanlscai. tf.e coa-rai 
a'atabasa has ooen tampsi-ed wftn sina aii osege ss Ois- 
abtea . PirograsTi cods tor i-iaadSing tiais siafnps oasi rssscfe 
;!■( 8 socijaly madoSs. 

H;?My!?£C>K-(;gossfea}^ 

P113| A cofj^pasfio afjject can be haisdiod by dsfihitsg 
a oohtrcf data fohnat with eontroi eiemshta oefiiiSng re- 
iaiioasnips Betweoa noasiffaent esiects aad by ri:al'ir5!?^g 
a psrentrsiisid asemsh! ahP a reiated oPiec; id etei-aedi;. 
F;3rsxarnpis. snjipBsa a nrekar warsSs to iaei-jda 8 vicies 
sod a tax! book it^ ai^ eOucatiOhs! psokage. Ha cf eaias 
8 paroa; Disjeci wi'ii centrni oismaa's rsH'iaaiog ii^e vid- 
eo and Ss>itbQ0k objects, i-ia aise irieiiidss oontroi eiss- 
a-ients the cootrol dsta for ma video ofojsc! «po ths 
taS>baekoS)|sct rijfarringto iha parsirst ob^ac-. Finaiiy, tie 
adds progrsiii proosdures to arograirt nx'doies to proc- 



ess me conircf eSerriafits. 

|8114| m 08?ef words, 'm^n ths data object '$s a mm- 
posits data oi:;«st inMit^ at iesst two oorsstifiisnt data 
cbiscis, a !-espge;!va'5f:iio>'8i ss' ctconiroi dafs is crs:8red 
'> Sor&ach of the cofssisfisant dai&otssect atJdttiecaroposiie 
aata object, in fssponss to a request from a ussr, a re- 
apaative Lsssr sat of co-ifrei data is ateaE-sd tot aaoi't of 
iiw conssisaen- dsia oi^ieots as weii ss for the carrpQsM 
data etJiect. 

?» [ftltSI Esstmpies of various data package sirsjctarss 
for cotTipostte objects are giv«a in Fig, 17, 
[01 1 6| Ahottter side of cot^posste abjacis is wtiers the 
user warss to eorabine data ob|ects for soata pai^ticniar 
nae. Goaibiaariofi is a usaga aotioa tfta; miicstba pefrrut- 
■ tect ir: aacfi constituent cta-a o&ject. A new data object is 
areataa wisn com:rc! data linking tiiie oDasii'ijaer data ab - 
isots. Eacn coastiftient data opjact s-at&ias ;fs ori-gtriai con- 
rro! data whfch aoahnufs io cnatroi ifs auiasai^oaat usage. 
[81 1 7} Wm a ussr reqaests authorisation for t,!saga 
of cos coastitiiant data object in acomposita data objecf, 
a oaeras; of conttoi data iscraatod Ofsiy for ihas consiit- 
usi^t data oOject and cerioateaatsd oesy wstt-s a copy of 
ihafrcansttttjsnt data otJieot, 



pi 1g| Tne fiexipie centro; data stasctura and r?-!Oduisf 
Pfogtarfi strijptut* peratit aftfioat botjndfess exterisipiii-y 
witn ragam to impiaaieiitafion of tag owngi^s rgquiira- 
mohts toi- sisage contfoi arsd royaity paymant, l"he oorttroi 
dslis straoture can irtciade corttroi aiemeRtstoreorjrptek 
i.iaertypes. uaaga types, (Tiijffipiabsiiitigsciien-tes, artisiio 
or ownership oredtt raqoireo^ents and cti^ers, Sasorijy 
aioe.y,j!escandsinc.iadeaw!i[ctrir!t:er3ctv,4ri'!anyveriat!on 
;ss of she controi data atn(C-i..!ra and tf^e oootro- data, Secti:hty 
nioduies oosild raqntre a dia- up to tne bi-okers aara proa- 
sasor to approve ioadiag or nsage SHSioas arid to iajpia- 
manf app-^vai autheriticatioa matjftaniSiTis, 



11 s| A ia-oitad or tuit iropsei-perftatioa of tha broker's 
eata packagiir^g prograra can ba in'ipiameritad on tng us- 
er's ntaohioe 10 panviS fiirtt-er diat-ibutiorf or reseiiiug. 
However, oniy those data cbjecja wtttt comnsi data psr- 
srcitdng furtftsr dis5rii;fiition or reselhfig are srfabiad in ti-ia; 



lQf2^ An a(.ithor of a data objact may wai-tt to aiiow 
hie erigtnai bresar to distdbutg his ctata objec to othsr 
brokers whotfi wiii aiso dfairibote his isriage, i-ie tften in- 
cfudas a controi ei>ae}eat whictt enabiss rebroi^anng -n 
S5 iae control dafa bafore disEnboiing ii-fs data objaot witi? 
its. associated confE-of data to She onginga! broker. Upoei 
reqoest for rabrakeriog, tifjo ortgioai broker fjopias the 
g-enarai eat: at oontrcl data at tci apdates the copy io areate 
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auserset of oomroidata Which wiii'imcTioR ast?^g gsiisi-g! 
set of control data on ihg sL.ibs8qi.i8nt broters aar.s proc- 
ssssor. f he Of iginas ijrciKsr packages ins asta o»!«cs 
tns iissr sst or coniroi dats and Jt-gnstsrs ths ss;ckags to 
ih« ssibssQuant brakst- Tf;s suiiissqusnt broker ts-ian pm- 
csscis as it im wsrs m sriginal broker. 

|0ig1J Tt-is :s; art s.xaBip!s fsovv tns prsdetsfrf'ined 
c,0!idiiior\-5 for usage it^ciu d-sd in comnrji ogta can be 
used for achieving autoii'saied i'snsacJiOn nsgosistscii. 
|Q122| Supposs some cosrspany wfiats to provsds a 
Ci>mp).:t8r a(.:tO!PaSi5Ci s!ac:K frasSiirsg. Swy snd ssSi osxsjjrs; 
could b« ip-ipsSiTsented in trss fon-n of data psK;i<sgsta and 
a user prijgfBST: coald prfjcess ths data psic:!<ages arid 
exaoym trsnsaotiops. Dais paoKages cousd esrry dtgiigi 
cjjsh snti manage paynien; based aa condiBons daf iaacs 
in tiie eont?8i dais. 

1,01 :g5| in this sxampie, ihs dlp/ orcfsr is crsiateci using 
a sista packagsfig progfaif ■ sccarcitf sg ta iha ifJvefiSisn 
tno ^ii-yof s SPia proosssof . Trjs sei; ordsr is Pi^aiea us- 
•ssg the djata paciKaging ps'ags'arri of • Si5a saiier's daia proc- 
sssor. Both proers ars iissd by th>s Jhs pssr program ofi 
the ssoctctfacier's data processor. Thsasagos wen i<stasg 
the tan'fi ot using a sail o::tjer ;Sasa pas;i<;*ge to aeii aiook 
a'x1 3 bu>' ordS!" data pacKsga bny stock Ti\o n.iies or 
condiuoas for bnytag aud seii!!>g s!0C!<s conid i:>e ind:c;5t- 
®d in tb® consroi data o' tha packages, Tha dara nbioct 
cansssts af digtiai mans^/, in thsa asntext it is in-ipoasnJ io 
f-ams:mper rhai digsaS JTionoy is meraiy data whiCh i-at«r- 
enKesreai!T;Onsj?orvin.taimons5?inatis ;sBnedand!Tra!n- 
TSiiiao fsr ihe pufposa of digital wanssctiona, 
{0184] in tnis exar-npia the hiiyaf starts with a digiirai 
mo!>8y oasa fiis. He osas ttea daia packaging pi-sgirsni to 
oraem aontrni eiata, e.g. i<in;3 cf s;oci<, price, quantity, 'or 
;ha pafchasa, and he tdea pae*!ages tns digitai money 
dasa fi!s and Jhs conins; data a saours paci^age as 
ciescnd;5d abave. 

ptaS] Tha spifer starts wisi'? an snipty data fsia, Thip 
empiy ttia is aaasoaous to ths Sigiiai nionay daiatiis sx- 
fisp; it is ampty. 'The aeiiai- craatos PPrrtroi dasa, a,§. Kind 
ot stack, price . tiu aniitif , asid paokagas bio empty fife and 
the cantfof dara iaio a se-ciirs paakaga. 

Bosh tbs aaii order package and tbs any orEfer 
paaksga a f« transferred ! o ti^e data p r oaassor a? tns 3taci<. 
rrading company, where rhey are r8;;eivsd and stored if ■ 
the n-samo-v: Tf-iS iissf pragrani a' sna siosk trading con;- 
pany sxisrhinos tne contrn! data of tne day and saif Oi'cfer 
packages in tbe same way .as has been described abnve 
arid iooKs for a msich, Upoa ideniifying mstcsiecJ bay and 
seii orders tPe r.^ar prograni exacuias a tfansactioo. 
wherabythadigstai money is axn'acisaffonitbs buy o'^Ser 
data pacsaga andifsas'mTeci taihs seii oroas- paci<aqe. 
Then the cofiiroi aaia of !i?a data paai<agas is iipda-aa 
TO pnsvido an audit trais. Boih paokagsa a--e i^pspKagad 
in 'be saa^a mannar as ihey -iisrara prasiiiusiy packaged 
and tnaa transfs-Tso paoK tp thair aothnra. 
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pt2?\ Tba abova dasoridsd taoiinisius ooijid ba usad 
for ssiifng snd b«v(ng any object as wati as for ay^oa'satsd 
nsgotiaSions, Payment may be carried cat si's cihar ways 
tnan by digital monay. 
i [Oi 2B} i fi ti'ie genetai aasa. fha da-a procsssof o! ttse 
user dscrypis the asags csntnss eismsats ettiis user sets 
of cof:-n:i! data and examtriss the ijsags coriirai aiementa 
io firsd 8 march, fn response to the finding (5t a match, -he 
ijser's datapmcessorcafriea out an aobori whicb isspec- 
iftad in she usci- act of comol da-a. 



CSafms 

1. AmetbodfermsnaQingacjataPDjectspasiocompiv 
mtit contfoi conditfons for ijsage ot tns data objsct 
(24), cctrspnsipg tha steps o': 



stoi^ing *e dats cbssct i24) i;> a man^ory dasffca 

-'i*' i i I ), whSiTi it is aceessiPie by means nt a data 

objeai provider's aata proccsaar i tO); 
providing a vanaiJia rtumber of corssroi cendr- 
tion.'S tor aaaae ot ths ri.ata cbjeor; 
pmviding, by said data precesspr t1 0 !, a gsnarai 

i^J saf of coniro! aata {5(51 for ibe dasa obj<5<.t (24j 

Pasad on said variabfs nui'nber o! confroi con- 
ditions for i,isag8, said ganefaiset of control data 
corrtprising af ieaas one or racre usage controi 
asaments defining usages of tbs data obiect t£4 j 
Vf bsch comply with said var iabie ncrubsr of con- 
tnsi osnditiona, aad an idantitiar which unisuaiy 
idanbfiea 'be gauej-sss set of controi aata (50); 
stonngs&td gaharai sat ofpcntroi data {50) in a 
mem»:"y device {"i'l'i. wbara i? is .acce&siaie ay 

ss said data processor MO); 

conoetenating {VMi] the ger-arai sat of controi 
da-a s50! with a copy of the data ofjjscrE {24); 
ancrypring { 1 008) tbs copy pf tfis data oioisot 
(24} ana said one: or miora usage cossirsii aio- 

■*n man-s tp create a assure data pasi<:ags vifhicb is 

ready for transfer to a ussr. and 
creating a sseuriSy coatiXii afsmant whicb rs- 
quires tbat a issr program mustcontaio sssec- 
I'ied key or passv/ord to arisbie dsoryption. 

4,S 

2, A method for maivaging a data otsieot so as io conipiy 
Witts prsdatermined conditions tor asags of ths data 
{jbjeot cornpnsirig ths steps 

AS Btobng the data »b[eot ;S4 • in a memary device 

(1 1), wbeis It is accessible by m&m of a data 
oDjeof provider's oata processor itO); 
crsa-ing, by said data ci'oceaeor i 1 0s, a generai 
set of controi data iSO) for tne dafa object based 

t* on oaio ps-obetarrnined ootiditions for usage. 

said gerssi-al sat of controt data sompnsing at 
least one or mora usage controi aietnefita defin - 
ing usages ot tbs data objsct whicn ccrnpiy wstb 
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stfirirsg sais gsnsra; set o' comroi data tsO^ m a 
said da5s piticssson 

CDncsten;5t:rsg (rOOS) iSse gsnsrssi s;sJ af con-roi 
ciasa (60; with a copy erf ih« ciasa oEjjsct: and 
sncfvpsing {1008; s; isssst ths espy 'S-:;; dsia 
object (24! and said o!'® c-r more usage contTOi 
etemarsfs ii) c?sa»® a ssciira cisra packaga which 
m rm^' for mm^rta a imr. 

3, A sTiSihcid as dasT:«d si^ Ciiairo wfisrsin the step of 
sncfypting co;T)p:-ss8s erjcfyptiog she data oDisc? ana 
!f?e geaarai set sf c;ontr;>i <i3)a. 

4, A nsaShO'j as c!3»ii!;:d sa Ciaifn .? i;? O^ari S. vvh:;.'s.>j'^ 

an 'irfentr^ia; wiir.f; uai<.;sj:?iv Sds.-r^fn'ias: Jn<s ganafai set 
otcpntroidata, 

5, A rrseihosi as clasf -sd aay ot GSasTB 3 so 4, syfvsmss 
tr^e stap otarsatsap a gsasiti! ss). at aoasroi dais com- 
pnstrs cre;S;;ing a sscijrity casBj'os eiesnaat wh:ch iCien- 
Titiss 8 ssc'jfity omooss to po aspiisd bsiors usags 
of (ha data objaot is allowed 

6, A :Ti»ih-:;d as ciasfncd 'fi fsny of Ciair'is 2 iafi, who'-eif; 
iha step otcrsatiftg a gsasra! set: ot control datacoiV)- 
onsa J c.raaiir'C! a ■ati^int ccatrai oiai-asf)! which sdaf^- 
t:hss ti-se tenrsai of Ths ccnirs! daia. 

7, A m«ihod as claisTiiJd if) any «f Gialirns 2 •» 6. cofn- 
prfstpg tf^e ferspersjcps ot; 

crsating: sf; response to a reauess fcr aistnorssa- 
aan tar asaga of tba data objaar ay a vsaar. a asar 
ast ot asaifol data, which Cismprisas aE leaa: a 
sdbsst a? rha pcasra! set of comroi dara. isipsud- 
Irsg at isast a;?a af sad asaga caf?5roi elaa^aa'S:; 
iiSifig ihs ussf set of ooatrpi dasa sassess! of tr;* 
gaassral sst of caniasl dahs I?) satd concaiairsasiag 
Step: 

using tha at laast oag osags aantroi aiamant of 
the user sat of contral data li^stssd of tha oiis or 
mora usaga cantroi aisaiaats a) tha gsriaraf set 
of coatfol data if5 fha aficsypilfia step: 
ahsscltiog, bafars aifawiag tfansfsr of tba data 
packaga to -ha hsiSr, that said r&!?««J! far ao- 
thorftatich for usags of the data object has esej^ 
grantad, 

S. A aiailiod as olaimod ;?5 any praaaciiag aiaiai, fanhar 
con?prtS!nci -hs steps of raceknag -i^ said data proc- 
assor ths raquasi: far aaihodaahoa for lisaga bv a 
iisar; carnpahrig iha usaga lor -whic?? at.:th;;h^aj!Of; 
iS requassed with s«id ana or niors asa>ge oohtroi 
aiamanis of tha ganarjj! sar fjf caolroi data arsd gf anl- 
irtp: the autbprisasoa if tha tisags foi' which aumoi-v 



29fion ss i^sqyeaSsdoompiiss With tha usages dsfinsd 
by said oris or fTiora ysaga contfoi sian^aats, 

S, A a-iet{^c.<j as cssia-^ad ia Gialn-^ 8, tudher co'i-ipdaii^g 
'> the step G: securiag paynseat for she requasssa au- 
thorsatioii tcr usage bafare graating the sytbah^a- 
tioa, 

■50, A a-saiaod as ciaif?-ied in Ciaiai fj or Ciaiai -J, wherain 
J» the dara os>i«c; is coiTspeses at at Sesst iwo cos-istif- 
aaat d?ja abiects 3od'<^hea?'n iha asarsoi af t^aatroi 
data, in rasispnee so a reqsjest for aau'icihjaiiton for 
usage af ana af said caastftuaat dam abiaafs Py a 
user, i& creaissd aniy far :hat aanaiiksaai: data •Jbjac; 
■ and coiicateaatad on v with a copy at tha^ aoasf i-itehi 
data ob{8d: 

■5 1 , A faemad aa clalmad ia any af Ciala-ss 8 ta 1 D, whera- 
tr< rhs i;{ata provsaer's d-ata prcc-ssscr is oofsheotad 
to a data aawoi-x ar^d tha ■'aai.iast 'ar aufiXihcat-on 
(s taaeivacs froas a aasa proaessot ihs asar. waiab 
is also coaaaaea to the data aatworK, frihii^ar aohv 
Pfslag the siea of irasistsrrsrsg the data package 
thitii^gi^ tha data •taswor!< ro the user s data prctoes- 
iisJ sar. 

53. AmeShaaaa cia'road'aaoy cfCial.'asSia i :.vrha''e- 
irs the data objsct is acoraposiie data oDiec! iiric-iidinQ 
at ieasrrwa ooassifyanr dara abiacia aad 
>>s* vshereia ths ssep of oreatiag a gsaeraf set of coairoi 
data ce'ripi-tses tha ssepof Cfeat!!>g a i-espacsve gsiv 
oral sat af aoasrol da!a for aaah of tir-a caastitijeo; 
data obieois ahd tha compoaiia dats Pbjeo? and 
wharf ;ia the s- ap af crea! lag a aaar sat of aoatro! dara 
GosYipj-issa ihs atap ot creating a raspeotivs user set 
ofcorarfjiciafatafaach aftheaaaati'Liam dataobjaa:;; 
and tfis eoEapcstfa dsJa oPjea!:. 

t3, A a^ethad as oiasi-aad fo aay at Ciaifas 8 ta 1 2, corn- 
*? prising the f i^-thar sfap ot stoiaig a oopy of the usar 
set af canifoi da-aia !ha datsi e!)jects pi-evidar'a proc- 
essor. 

14, A tnethod ;is cisiaied in any prscedii?g clafrn, coni- 
•«* prising the furtner sSeps of: 

rscaiviag tha data paci<ac5e in a issar's dataprco- 
esspp 

atoring tha data package itt a meh^ory device 
■sa >sjhara if Is aaaesaibia ay niaaos of tha ijsers 

data processph 

dacrypaag said one or mara asage aaatfoi ais- 
ntents; 

ahaaklng. la respaasa ta a raauast ay the asar 
i-'- for ijsags of tfja data Giisiact. whether the ra- 

goastsd usage cosripliss with the usage dehs-isd 
by tha at ieaat oaa usage caatrei efamarjf of the 
gahei-ai sat o? coittrol data; 



.!-h 



4,S 



13 



25 

?3$cryiS!Sf!g; sr^ r^sponss to the rsqusstso usags 
CGOipiying wsSh the usags dsfinsd by the at Issst 
one lissgs^ cofstros eisjf sejit the g«n*5ra! sf 
contfoi data, if^s daia 9b|8sS: and srmbimg ihs 
:i«q>jssS3d ijs&gs, at!'«raisss disabling: it, 

1S, A n-s8!:boiS as; cjasrrisd in any ;;f Ciainss St« 13, cons- 
pfteisici ths kifthsr steps c?; 

i^cesvmg t}-a dsis package iri s ijser's data prjc- 

stonng ine iiass paci'iags :rs a srissTsofv dsvics 
wnsfg it ss ,sce;8ssi:bie by frieans of &g ussf's 
djjta pf 'JCfissffi!-; 

sectyptfng the at ieast ons usage csntros >ste- 
ST?;}!'^ i3f the t'Ssr sijt of cofstrol data; 
criSoKiiig, ir^ fssponse to a raquset by the user 
for iisagsj of fbe oata obiac), isjhether m- 

by tJis a; least one usage cornni! s:le!T!8fit of the 
LiSisr ssst: of cot ■■rc: data; 
deciypting. in responsa m tiie fscsusstsd usaga 
corripSysng --Mil shs: sisage d«f mad by !hs & isast 
one usage csntroi siamsiii of iha Lissf saiof cen- 
f;-ol data, the data o!:^ec; ana snafelifig the s-a- 
auessed usage, otitefs-ise dissbi^fsg it. 

18, A n^ethod as cisifiiad ;h Ciaift? 14 or Cias:?! IS, coiV)- 
pdsiog the ''virtharsieps oi raooncaiaoating. atso'the 
ussage ?)t the datss ob;«ci< the date objaci and tssa ans 
or mere usage csi^troi eien-ients. reancrypting at 
■east the ciaia obiscf and • hs ana or oiore usags con • 
Tro! eierfrants. arfdstoi-irsg sne thus-repackaged data 
package in thaaiemory oi !ha y ser sdaia prQcosscsr 

1 ?, A oiashcsfi aS coofroiisn^g tha Lisaga of a data obje<^{ 
so as !a csirspiy isjsth contfoi conaitions tor nsage of 
•iba ciata nbiect. ^vhere the data obiaot is coiitai'-ied 
wifbio a aa!a psckags canpfissng said data objsot 
anb a sat of controi aata, saia sei ot con!r<>i data 
cjjnipnsifig 8!: iaaat one Lssaga conts'ai aSamant de- 
f ijiing a usage ot tne aata oisjact whicn costipiies with 
fsom:!0f ctsnditions for usage ot a ciata obiao?:. and 
said sat ot coiitroi daia conxarisiog at least a controi 
data idef^ti'lsr whioh uniqysiy iderftrfias she aej: of 
contnst data, aruS wiiers iha data paeKsga is sacajrs 
as ti-)e baia obiefijt aad ijsags cantro; eienienss of the 
set ot eonti-o- data nave daeo ers{:fVpEod> tne nssthod 
POft?prising: 

ehaekihg, ie raspohse to a rss|uesi by a use? to? 
asaga of tbe data objaa;, wbarher the usor p>-a- 
gram ooriSains a key of password specified isy a 
secortty co?>tfoi aieiTioot ot saici data package, 
and 

ehackifig whether the reqi^estad usage aom- 
piisis W!fh tha nsaga ciafinad by fha a! iaast one 
asage eontroi aierrierjt of tfie set of acftt;-oi data, 



28 

and 

if! responsa to tha sxistsoos bf the specified key 
or passwaKl and in faspdnse to fha raqsjasssd 
usage cohipiyshg witii iha usage detified by tba 
'> as iaast one lisage controi aissnap! of tba set of 

corstro; date decryptifig the data ofc^sct and sh- 
abisng itfs roquasfod usaga, or oif!e;-wiss disa- 
biing if. 

18, A method for consfeiiiog tfie usage by a usar of a 
data ohgerS so as to compiy witft pi-edetemisr;8d can- 
ditiorss tor i^saga e^ fba data ctsjeoS, eomprisii^g iha 
steps of: 

stosing a data pacK&ge in a h^efrjoi^ device, 
Wb&re it is 8Es;sssibie by means of a data p>f jo- 
essorctf tiie user, said data paeicage oomprising 
tTte iMs obiea and cont roi dasa; wbsch co;T!pris- 
ea at ieest Oiie uaaga coiitroi eiament definirsg 
^' 8 usage of tPs data oibjsot wNiah cosTipiiss with 

iha pfedsfafmirtad oonditioos, iha data ofjjec^ 
add said at ieasS ona usage controi eiemedt toe- 
ing suoiypiad; 

receiviiig a request by tiie user tor usage of the 
iisJ dafa obfgot: 

decryptsng the cottroi daia; 
chaoiiing, in respsfisa io tba request by tha user 
for usage oS if^e data oi:;jeot, wheti-fsr the re- 
quested usage cotTipiies with the usage defidad 
by the at iaast ooe usage eontroi efsmoi^ of iha 
oentrui data; 

dacryp-iing, in respOose to ff^a resqyeatad ijsage 
eompVihg with the usage detided by the at ieaet 
one usage coatroi e!e;T!eut of tba controi data, 
ss fhe dsta odieot and enabiing tha ?^quasfed us- 

age, othefyjise disabifog it, 

19, A method ss ciairJied in Ciaim t8, wherein tbe usage 
ooRtfO! eiarneoi is opdaled after ihe usags of ihe 

^s dsta obieet, 

m, .AmeihodasciSiu-ssdinC-iai'r, igorCis-T wi-iS-s- 
Said coai'i-oi data comprises an ind'oe^ion a' the 
ouuidar of iimas tha use? is autnorsed to use ina 
data obiOO' iu accoixfarice >fi,'i;h sa:d 8' ieast one user 
cc>t5!roi aistTiatih wijerejo t^■f? '■&quas;ea usaga of tha 
tiara atjjeet fs oaiy snatsied wi^sn said number of 
iitnas is ons or dsra: and vshafasu satd ruimbar ot 
fiihiaa :s daeremehfed by aha when the raQuaated 
usage -s aaaoied. 

gl. A iTioihod as ciaimed in any of CiaitTis ts to SO 
wberairs tf]e coi^troi dais oo.h^prise a seouriiy oeriiroi 
eiement, and tonher corapristng the step of earning 
00:, bafnra eaeij usage of ifts iSaSs ofosoa, a aaixso-y 
prdcadure dehrsd sr; the secuf-^,? controi eisn-icr-t 

22. A rriiStnod as cisiirsad in any ot Cisims 18 to 2"; , 
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wh«rsiri the step of checking wnsiner tns reqiissled 
kisagg cornpiigs vysth th« ijssjge dgfsngiS by th« isssl 
ons usssgs !;;cs:5Sro! ssernsni carsiffhses tt;3 stsp sf 
ehscKirig that ths users dsta processor is capabSs 
iSf carrying i&t the securiiy pracsdiirs spsdtsed 
the seciirity coni'ti! sfejTssrst of the usef set of contfsi 
da!&> 3!-!(l if rsol, dis^jbgng tf-s u«;sgs;. 

23, A mstfiDci as cisimgd n-. a^y of CSairtss 1 3 to S2, com - 
pj-istfs g the f iirinef sssps or i^concaiSfsating. sltsfths 
kisagg of !hg data obiect, ;i>g data object an« toe one 
or mors oontroS eienist'is, fs^f-ciyptjr.g at 
iaast the dasa obsa af;d ;hg one or mom usagg oon - 
ircii siBST: tints, and ssorsngths thos -fepackagsd dsts 
package tn the m>S!^io!y of she oser's date processof, 

24, A systeo) for n-sarisg-rsf} e dais, objo® (24} so ss le 
coirspiy vsith CBrjtmi cori«Uior:sfo!' lis^ji^e *>f JOe data 
Qi^ee^,- oomprsssog: 

!T!SSif :S for providifsg a vaf iabie fiomfser of co)-itfOi 
condkiof^s: 

first rrisafis (304! io tne EiaSa iSKK«a prowdsr's 
'3ai3 oi-ocessor for srevidiiig a gorigra! set of 
ftoorfof data for tha rfsda of:yac; basad a:-s tbe 
vaaable non^bsro? control oofidiJions for usacie, 
sase ggnsfai set of cooiro; dara ooaipfising at 
ieasS Oils or mors ossgecorsf ros eiemsnts iisfin- 
ing usages of tna data oDject ;24; whicb comp iy 
witfs tf'g vsriabift nomber ot cooiroi ooaditfons 
ena esi icf>sr>?if:iar wbtcn uniquely ibsnfsfies tf>e 
geasra; sfi^ of contraS ciasa (SO), 
atoring means 0- vsihich ars accessibie fey 
!T5aans o! saici cia'a pfiscaasor. for stobna tbs 
gansnai sat of consrss deta; 
secubsy STiodtiias fSO^tforperfffirmingiria sgo«- 
bty procsodof e ciofinsssi bytt-s ss:c;i}rit>,f oontriji «S- 
■m&nt m she dsta object (24}: 
coacsifenabfsg sf-aaos for co;5C5(iana:ing tfss 
genere; ses of centre! dasa wisfi a eopj? of the 
b;st3 oOiafit: and 

socrvsJiing diaaris f3{3&} fo? anoryctfng tbs copy 
af she baJa obiecs: and a; ieast sais ong or more 
usage coritroi aiamants io create 3 £oc>.im dasa 
packagg. which is reacy for sransfgrto a aser, 

whergio conrro! eigmaoss wSbJn said gengrai set of 
contral dasa coniKsiiing asssgs ^!^ tSis dafa, otsjast sor?- 
taib a sacuhty aiemeos whscb requirsa ts>at a usar 
pregram aiLiS: coafaia a spadf-ad Key or password 
roaaaSjiadaoiVpSors. 

2S- A systaiT: of oonifoiiing !h« uaage ot a data objses ae 
as ra cesT-pSy «jith contrei eaadiriaas for usage of Ehg 
d;ata oi^s«3< w^iera she data ofjject is Boasaiaod wishir; 
a data package ecmprsiiig said data opiect sod a 
safof oortiroi daSa, sara so! of CBniroidaSaeoirnpnsffsg 
or laass cna lisaga oontroi asemeos detmiag a usage 



of tha data osjeCt whicf^ oompSias wth controt cert- 
disfof^s lor usage ot a data objgci, and said set est 
ddnSfoi data eomphsixsg as -aasrS a contro! data !ds!> 
fifisr which oniqoeiy identipes tbe set of coofro- data, 
'> and ttf{]e;-8 tf^a data pacisaga is seciste as the data 
object and usage ccnt-~oi ejements et tbe est of cort- 
tro( siata haya baan aacrypied, the systaa-s coaipfis- 
iag-^ 

?f chaoising means tor ahecksng whether a itsar 

progrgRi ooraains a Stay or password ssacifiad 
py a seciJ! itv'contrpi a!efr;??!it of tnesat o^corftroi 
data of 5 he oat a package, eocf tor chr?ci<irig 
whaihar a request i;iy a oser for usage of the 

■ data object cornpiies v-flth tpa oasae def sneo Py 

tue af Seasraae usage oontru: eiafneri- attha ast 
ofcoinrpi daia. 

dsarsfp-sng and auatjiiug niaans far decrypting 
tna da-a obiect and enabisng m raguastsd oa- 
-'S' age so respo'ise to ;ne ei(!s;aoce ci ir^e specified 

key er password aad when the reqtjsstad: waage 
rtcmpSes v<i!tn sr-e osage defirfae py the at ieast 
of-a osaga cofitroS eierfisrst ot the sat of coutrai 
da.?a- and 

;S' Oiaebiiog mearig for diaa^bsipg 'he reejt.sastea ua 

age wS'SCs the rapuaa-ea aaaga does ost oot^'ipiy 
wifhthe usage da'ined py ihe tJf ieastona otiaga 
eotttro; aiertiertt ot tne sat sf cottfro! data. 

26, A syssam tor managing a o,ata odject so as to cot^piy 
with predsteprsioadcondstions fc- usage of the data 
oisiact, oamprisiag; 

first means fo the dara abiact pfoviciar'a data 
;5S pj-oeeseor for oraating a ganatai aet of centroi 

data for the d.ata sxsiaur based on the p^datar- 
mfoad candi-ioRS for usage, said geaaraS sat of 
ccptfpi data compriSipg at ieast one or more us- 
age coataii aien-tants defining tisagas isf ihe data 
■*r5 Object wbscn cerripiy ysith tne pi^datermined 

ooffdftioffa; 

stonrig mssns, whicn srs accassibia ijy stteans 
of said data pJXJcessor, forstonng the aata object 
and ■i'ia generai set at contro! data: 
-•^.^ ocrir;atart.atfr!g maans tor corsriatanatioo, ihe 

generai aet of cotitroi d.ata witti a copy of tha 
data obfacf: artd 

ancryptsng means for encrypting: the copy of tiie 
data dbjacf and at iiaast said dna or p»ra oaage 
AS aootrai aieraents to create a aacura dara pack- 

ssga, which sa ready* fartraoafer le a user. 

27, A syatam as cSaimad in Ciairrs £6, tortt-saroomprtaing 

seosjna means in said data processor for craat- 
ing, io response to a s-agosst for aufhorisation 
far osage of rhs data ai>sa«;t by a osar. a usaraet 
0? corttrpi oats, wnich comprises at ieast a atib- 
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sst 0? the gsriS'^f sst of contros <Ss!s, whtef^ sub- 
set comprises ;sasi; one of said usage cssjitfoi 
«S8?rss:5tsc and 

ehecKing r?is«ns in said data procsssssr tor 
chacking shaJ s&Jd rsquss; far a;jthorSxai;on for 
ussgs ot she data objoct has se«n gmiiSsd be- 
fcrs allowing treifss'ef of ths d:aS;3 package Soths 

2$, A system as clsii^-iSSS 'm Cisim 26 Of 27. whsr-sin ths 
gaf^erai sa! of oonifO! dai;a osmprisaa aeonlToS data 
«S8!ns-?f W!-(fc:t; detffiss the rigii! So ti.ii1:h«rd!Stf Ibutfe!-; 
oitae claia objastfoy she um. 

29, A «5fStsm fat-controlling the usags oy a ussrof a data 
Qbjsct SC! as t(: co?np!y wttti predeisi-iTisoisa candititsns 
for usage of ihs cSass o&joct, oompnsiiig; 

stonf-sg mosns tef stonng a data package whicai 

oonisji-tses a csita objeat sr!d a coairof data com- 

pfissng a; ssasi ons ysage canSraS 8ie:;f ssni de- 

fiai acj 8 usage of the dasa object whiic-n ociTspiiesi 

with iSje prsdstafiTiSfifici corsdliions: 

msaris fordscrypti??^ the ai isast one usage con- 

rroS eSarngr?!: arid t??e oats osgecp 

ohsoKing mesrss tof Oihecksng whsi'^af a usags 

^?aijesti?d byths yss-'ca'Tipfisrs wittphs usaga 

defines Dy sasd at fsijst ons o5;ao& contf^J 8Se> 

msat; 

anaisisno means; fsr af sabiing ?bg us;5g8 "aqyassj- 
ad Pv foe Lisa; woers the y^aga ccmpiics '■.".-■.'^ 
tns Lssags dafsnad by said at soas; on«! issaga 
corftrof eissTient: and 

cissassSng ifiaans fas- ttiaassrsg iha ussge ra- 
anesied by ?Jio ysat when iha usago does rsct 
cB!T:p!y witn rha uaaga defined by saici at iaast 
one nsaga co!-:tfoi aien-sant, 

30, A systarn as mkmd in Giaisf • 24 or Claim 2S. further 
coniprising mestns fo^- rooacKaging the -data odiect 
after uasga f;hareof: 

31 < A n-safbodtcif ccatrosSiag ths usage by a user of data 
afjjscts so ss to conipiy vyfff; pro detaf myriad condi- 
tions for asage of ti^a data oisaots, oomprlsing tbs 
ijfepaof: 

storing at iaast -iwo dafa paci^agss in a mamofv 
device, wboi-e they ss-e aooeesibie dy a data 
pf-acsssor af the liasr. oeaf! said aafa package 
cos-nprismg a dafa objaci asid a csaraet of oanscci 
ciafa. which con-sarisea at iaasr oca usage aoj-itfoi 
aSemS'-it :detintf;g a osage of iiia data objeot 
whiob ooffipiies wirh ths pradotanTVirjod ooodi- 
Slona ,tf}>5 dais obiesrsnd said at iaaaf one usage 
controf eisments being encrypted: 
uaor^p! in gtb!5 osago cefifro! eiss-asjtts f>? Ehe us- 
er sets of coriffoS data; 



examining the osago contfoi eiornarsts o? s&id at 
faast t^vo aafa packages to find a match; 
using, in raspcnsa to tha • indtng of a matoh, iha 
data procassor to carry oat ac actioOi which is 
'> spooifiad in tfie uasr sets of caiitroi daia. 

S2. A meff-sod as oiasmed in Claim 31 , consprisifsg the 
f!j!lher -steps of opdatirsg the usage corsiroi element 
of each data paaksga, reaonaaroastieg attar ths; ua- 
?» age of the dais odpets, eacii of the data object and 
fia Lssage coatroi ejiomoct. raoccfyptiag aach of tne 
corscateriated data cbjecSs aud its usage con;rci ei- 
eaj&rit ana traosf«friog the repackegad data oi>|ect8 
i.Q 'heif c:f;atars, 
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